It is possible to cluster different single hosts and network ranges to a new Network group.
This network group can be used in Web Filtering Profiles->Proxy Profiles to allow/deny internet access for these machines (users).
Unfortunately network group with included network ranges DO NOT WORK.
These IPs will be skipped and will follow the default rule of the profile according to the scheme shown in "Overview".
The WebGUI is does not allow to DND network range objects into the source networks container so this behaviour seems well known. The detour using a group with an embedded range object isn't prohibited but doesn't work.
There seem to be two main solutions.
1) Prohibit groups with embedded range objects. -> Bad for user with fragmented networks. ("Alter the WebGUI.")
2) Compute nested groups down to the last level during insert/save. -> Best user experience, most work. ("Please?")
This thread was automatically locked due to age.
