46
Copyright © 1990-2011 Norman ASA
Norman Network Protection
Administrator Guide
Administration and configuration | Configure
Figure 42: Join Endpoint Manager
If the NNP is already a member of a Norman Endpoint Manager realm, then a notification is available.
See the figure below:
Figure 43: Join Endpoint Manager (already a member)
Note
Please refer to the document ‘Managing NNP from Norman Endpoint Manager’ for more details about
centralized NNP management.
Block and Exclude settings
This option allows you to block computers from sending or receiving traffic through Network
Protection, and to exclude traffic to or from a computer being scanned. In a static IP address network
the option of blocking or excluding an IP address would normally be sufficient, but in a DHCP-based
IP network the lease time may be very short and the excluded computers may acquire a different IP
address next time it renews its DHCP lease. To accommodate for this situation, there’s also an option
to specify the MAC address, which is better as an unique identifier for a computer.
In addition you can block all traffic to or from a specified VLAN ID, or exclude traffic to or from a spe-
cific VLAN ID from being scanned.
Note
Using this feature can cause computers to behave erratically in some scenarios. For example, a
blocked computer will not be able to communicate with computers outside the Network Protection seg-
ment.
Use with caution!
Note well
Allowing network traffic to/from computers or specific VLANs not to be scanned for malicious code can
seriously jeopardize the health of your network.
