Adds a policy configuration rule for a host IP address to a network whitelist. You enter each rule separately. You can add up to 256 network whitelist rules.
Important
After you add a rule to a network whitelist, use the
policymgr refresh-policycommand in the CLI configuration mode to refresh the policy configuration.
Syntax
policymgr network host <IPAddress> <maskLength> interface <interfaceType> [vlan <vlanID>] {allow | monitor}
no policymgr network host <IPAddress> <maskLength> [vlan <vlanID>]
Parameters
no
Use the no form of this command to delete the policy configuration for the host IP address from the network allow list.
<IPAddress>
Source IP address or destination IP address that matches the defined IP address or mask.
<maskLength>
Valid network mask for the host prefix.
allow
Allows traffic from the specified host, network, or VLAN.
interface
Adds the interface to the network allow list.
<interfaceName>
The interface on which to apply the network whitelist. When you specify interface A, traffic entering the Network Security appliance on pether3 and pether4 is whitelisted. When you specify interface B, traffic entering the Network Security appliance on pether5 and pether6 is allowlisted. The following interfaces are available:
For the Trellix NX 10000 models: ALL or A.
For all other Trellix models: ALL, A, B, B1, or B2.
vlan
Adds the VLAN to the network allowed list.
<vlanID>
VLAN identification number to add to the network whitelist. The default value is "ALL". The range is from 1 to 4094.
monitor
Monitors and allows traffic from the specified host, network, or VLAN.
Example
The following example shows how to add the policy configuration for the host IP address and mask length to a network allowed list.
hostname (config) # policymgr network host 1.1.1.1/32 interface ALL allow
hostname(config)# policymgr refresh-policy
The following example shows how to remove the policy configuration for the host IP address and mask length from a network allowed list.
hostname (config) # no policymgr network host 1.1.1.1/32
hostname(config)# policymgr refresh-policy
User role
Admin or Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Before Release 7.5. A total of 256 rule entries can be configured on a network whitelist in Release 8.0.