Interfaces/Interface Types

Interfaces (Computer Editor)

Displays the interfaces detected on the computer. If a Policy with multiple interface assignments has been assigned to this computer, interfaces that match the patterns defined in the Policy will be identified.

Interface Types (Policy Editor)

Displays the interfaces detected on the computer. If a Policy with multiple interface assignments has been assigned to this computer, interfaces that match the patterns defined in the Policy will be identified.

Network Interface Specificity

If you have computers with more than one interface, you can assign various elements of a Policy (Firewall Rules, etc.) to each interface. To configure a Policy for multiple interfaces, select Rules can apply to specific interfaces and type names and pattern matching strings in the fields below.

The interface type name is used only for reference. Common names include "LAN", "WAN", "DMZ", and "Wi-Fi" though any name may be used to map to your network's topology.

The Matches defines a wild-card based interface name match to auto map the interfaces to the appropriate interface type. Examples would be "Local Area Connection *", "eth*", and "Wireless *". When an interface cannot be mapped automatically, an Alert is triggered. You can manually map it from the Interfaces page in the computer editor for a particular computer.

If interfaces are detected on the computer that don't match any of these entries, the Manager will trigger an Alert.

Interface Types (Interface Patterns)

To enforce interface isolation, set the Enable Interface Isolation option on the Policy/Computer Editor > Firewall > Interface Isolation tab and enter string patterns that will match the names of the interfaces on a computer (in order of priority).

Vulnerability ProtectionDeep Security uses POSIX basic regular expressions to match interface names. For information on basic POSIX regular expressions, see http://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap09.html#tag_09_03
If you enter a string pattern that matches more than one interface on a computer, traffic will be allowed on all of those matching interfaces. To make sure that only one interface is active, set the Limit to one active interface option.