Working with computers and networks

In the Forcepoint Security Manager, a computer is the IP address (for example, 10.201.3.1 or fd3a:918a:71a1:bcaa::0011) associated with an end user’s machine. A network is the IP address range (for example, 10.201.3.2 - 10.201.3.44 or fd3a:918a:71a1:bcaa::1111 - fd3a:918a:71a1:bcaa::1211) that corresponds to a group of machines.

• If you have the Hybrid Module, note that the hybrid service does not apply policies to individual computer and network clients. See Working with hybrid service clients, for information about applying policies to filtered locations.
• Before applying policies to IPv6 computer and network clients, disable temporary IPv6 addresses on the affected machines. See support.forcepoint.com for details.

You can assign policies to computer and network clients just as you would to user, group, or domain clients.

• Assign a policy to a computer, for example, that does not require users to log on, or that can be accessed by users with guest accounts.
• Assign a policy to a network to apply the same policy to several machines at once.

When you assign a policy to a computer or network, that policy is enforced regardless of who is logged on to the client machine, unless you have assigned a policy to the logged-on user. When on-premises components enforce policy, the computer or network policy takes precedence over any group policies that may apply to the user. (The hybrid service applies the group policy before applying a computer or network policy. See Working with hybrid service clients.)