Configuring Untrusted Intranet Addresses

Context

The intranet addresses that are highly risky can be added to Untrusted Intranet IP Address. If Huawei Qiankun detects a risky intranet address, Huawei Qiankun matches the intranet address against those in Untrusted Intranet IP Address. If the intranet address is not found in Untrusted Intranet IP Address, Huawei Qiankun does not deliver the IP address as a blacklisted IP address to the device.

Procedure

1. Log in to the Huawei Qiankun console, and choose > My Services > Border Protection and Response.
2. Click Services in the menu bar, and choose IP Security Zone from the navigation tree.
3. Configure untrusted intranet IP addresses from Global Address Management > Untrusted Intranet IP Address.
   

   • To check the input rules of IP Address/Range, move the mouse cursor on the icon.
   • The name of an untrusted intranet IP address can be customized. You can flexibly set multiple untrusted intranet IP addresses based on service requirements (a maximum of 20 untrusted intranet IP addresses can be created for a single zone).
   Figure 1 Creating untrusted intranet IP addresses

   

Follow-up Procedure

• You can click untrusted intranet IP addresses in the Global Address Management to modify the existing configuration.
• You can click the icon next to untrusted intranet IP addresses in the Global Address Management to delete the existing configuration.