IP Ranges in Web Access Rules

[Anatoliy Mamchur]

Hi Adrien.
I have updated Wingate to version 7.2.0 (build 3409) in the release note whose is reffered to support IP Ranges in Web Access Rules.

In my case I use the following Credential Rule:
<<Apply this Rule if IP Address matches -> 192.168.2.*>> ... <<Assume User to be -> Wi-Fi User>>
But in the client Actitvity window user still the unknown and the corresponding Web Access Rule (which must deny access to some sites) not blocked Access on the client side but required Proxy authorization.

If I completely delete this Credential Rule we get the same result.
Could you please help me to understand how this new feature works.

Thanks in Advance,
Anatoliy Mamchur

[adrien]

Hi Anatoliy

The credential rules don't support wild-cards. That means it only works for single IP addresses, so your setting of 192.168.2.* won't match any client IP.

This was so we could do a quick map lookup instead of a slow linear search for a matching rule which would degrade performance as rules are added.

We have plans to allow a quick lookup for a defined range of IPs (rather than wild-card), but it's not implemented yet.

In the meantime, we added support to add IP ranges to web access rules, which means you can apply rules to that range of IPs, but just not get an assumed username.

Adrien

[Anatoliy Mamchur]

Hi Adrien,
thanks for the quick response.
Now everything is clear , but could you please more clarify where and how correctly add IP range to web access rule, because I did not find this possibility in the Rule Properties (you can see sceenshot)

thanks in advance,
Anatoliy

Attachments

Access Rule properties

AccRule.png (25.65 KiB) Viewed 3212 times

[adrien]

HI

you need to go to the "Where" tab. That's where the client is, and normally you'd set the who to everyone.

Adrien

[Anatoliy Mamchur]

Hi Adrien .
Excellent. I found it. I Just need to look carefully at the next tab :)
Thank you once again for help and we look forward for future releases
Anatoliy