2.8.15 Automatic updating of the network control list
When you add, update, or delete hardware information or device information, the network control list is automatically updated. The following describes update operations that are performed automatically.
-
If hardware asset information contains a MAC address or IP address that is not found in the network control list, information about the MAC address or IP address is added to the network control list.
-
If you change the status of the hardware asset to Disposed or delete the hardware asset information, the corresponding entry is removed from the network control list.
-
If you edit an IP address or MAC address in hardware asset information, the changes are applied to the network control list. However, if a hardware asset is associated with a device, editing the hardware asset information does not result in changes to the network control list because IP addresses and MAC addresses are collected from the device. If the network control setting for the same MAC address already exists, no changes are made in the network control list.
-
When device information contains a MAC address not found in the network control list, the MAC address and its IP address are added to the network control list. If the device that sent the device information has already been registered in the management server, the device is registered in the network control list with the permission status below. The permission status to be registered in the network control list is set according to the permission status of the device, as described in the following table:
Permission status of the device
Permission status in the control list
Allowed
Permit
Blocked
Not permit
Forced Blocking
Not permit
Not use period
Not permit
If the device that sent the device information has not been registered in the management server, the device is registered to the network control list with the following permission status. The permission status to be registered in the network control list is set according to the network monitor setting that is currently assigned to the network group to which the device's IP address belongs. The network monitor setting is displayed as the Discovered Nodes Option.
Network Monitor
Discovered nodes option
Permission status in the control list
Installed
Permit
Permit
Not Permit
Not Permit
Not Installed
Determined based on the settings in the network control settings file#
#: Determined based on the settings in the network control settings file. By default, the device with the "Permit" status is registered. For how to set the network control settings file, see the description of the procedure for editing the network control settings file in the JP1/IT Desktop Management 2 Configuration Guide.
-
If the most recently collected device information lacks a MAC address that was present in the previous set, the system assumes that the network card has been removed and deletes its MAC address information from the network control list. The MAC address is also removed from the network control list if the network card is disabled.
-
The system behavior when the IP address changes in the device information depends on the Judgment Form option selected in the Add Allow or Deny Network Access Permission dialog box or the Edit Network Connection Permission or Denial dialog box.
-
When the judgment form is MAC Address:
The IP address information for the device is changed in the network control list.
-
When the judgment form is IP Address or MAC Address + IP Address:
The device information in the network control list is left unchanged.
-
For this reason, we recommend that you select MAC Address as the judgment form in environments where IP addresses change frequently.
- Tip
-
By default, automatic updating of the network control list is enabled only for additions of devices. If you upgrade JP1/IT Desktop Management 2 version 10-02 or earlier, all automatic updates (including additions, changes, and deletions) are enabled.
When automatic updating is enabled for only additions, the network control settings are retained without being changed or deleted (if you attempt to change the settings, new settings are added). In the remaining network control settings, Confirmation Choices is set for Automatic Updates Effect (Only Add Operations Enabled).
For details about how to set automatic updating, see the description of the procedure for editing the automatic update of the network filter list in the JP1/IT Desktop Management 2 Administration Guide.