Specifications

Multi−User Authentication

When the action for a rule is set to Apply Policy and the threat is located on a port on a

device that supports Multi−User Authentication (e.g., Matrix DFE), you can apply a policy to

a specific MAC address or IP address. This lets you isolate a single user instead of affecting

all of the users on the port. You can apply a user−specific policy to an IP address or MAC

address instead of changing the port policy. If the threat MAC Address is unique to a

particular Threat IP (typically on devices at the edge of your network), select MAC to apply

the policy to the MAC address and override its port or dynamic policy. If the threat is on a

device at the core of your network and the MAC Address maps to several IP Addresses, select

IP to apply the policy to the IP Address and override its port or dynamic policy.

NOTES:

Policies applied

to a MAC source

will override

policies applied

to an IP source.

So, if there is a

policy currently

applied to a

MAC source,

applying a

policy to an

IP−source policy

will have no

effect.