This feature is available on Artica v4.30 Service Pack instable 881 or above or Artica v4.40
In many cases you have to be careful with the association of objects in an ACL rule.
Indeed, it is very easy to make mistakes:
Here are some examples:
¶ Example 1: Good
Detects if request going to google domains AND if client is a part of network listed in “Company IP sources”
¶ Example 2: Bad
Detects if request going to google domains AND if client is a part of network listed in “Company IP sources” AND if website is listed in “Websites for bandwidth limit”
This rule will never work because we have added two objects that have the same nature.
Since the request cannot be in two places at the same time, the calculation of this rule will always be wrong.
¶ The group of objects associates the OR switch
Let's say we want to add a list of objects and the rule matches if at least one element is detected in the set of objects.
The group of objects allows to gather a set of objects and put the OR switch with the set of objects that are linked.
- To make it possible use the “New group of objects” button.
- Give the name of this Group of objects and click on Add button
- The object has been associated with your rule, click on the icon with the image that represents the plus sign.
- Use the two buttons link object or New object to insert a set objects in this group and this whatever the nature of the objects
- We specify again that it is about adding objects and not elements.
Elements will always be filled in inside the objects.
Now this rule can be explained as :
Detects if request going to google domains AND if client is a part of network listed in “Company IP sources” OR if website is listed in “Websites for bandwidth limit” OR if client is a part of “Nowa grupa”
