added network range to posture check docs (#158)

* added network range to posture check docs

* added network range to posture check docs
This commit is contained in:
juliaroesschen
2024-02-28 17:01:11 +01:00
committed by GitHub
parent 4881cb026e
commit eff5c5d477

View File

@@ -3,7 +3,7 @@
NetBird helps administrators control who can access their network by creating policies. These policies decide which groups of peers are allowed to interact with one another, based on criteria like port, protocol and traffic direction.
Administrators can further refine access control through posture checks to enhance their existing policies. For example, they can verify whether a peer is using a specified version of NetBird, has the necessary version of the operating system, and is located within a permitted geolocation before allowing it to join the network.
Administrators can further refine access control through posture checks to enhance their existing policies. For example, they can verify whether a peer is using a specified version of NetBird, has the necessary version of an operating system, and is located within a permitted location before allowing it to join the network.
By adding these posture checks to the policies, NetBird makes sure only devices that meet certain security requirements can access the network. This helps keep the network safe and follows the Zero Trust approach, which means not trusting any device by default.
@@ -16,6 +16,7 @@ While we plan to expand the range of posture checks, these are the checks curren
- NetBird Client Version Check
- Country & Region Check
- Operating System Check
- Peer Network Range Check
<p>
@@ -29,11 +30,11 @@ The NetBird client version check ensures that only devices with the specified ve
### Geolocation (Country & Region) Check
The geolocation check examines the connecting device's geographical location based on its IP address.
This check allows administrators to either block or allow access from certain geographic regions,
This check allows to either block or allow access from certain geographic regions,
offering country-wide and city-level granularity.
<Note>
When you allow access from specific locations in the network settings, all other locations are automatically blocked. Conversely, blocking certain locations means only those are blocked, while access remains open for all other locations.
When allowing access from specific locations in the network settings, all other locations are automatically blocked. Conversely, blocking certain locations means only those are blocked, while access remains open for all other locations.
</Note>
### Operating System Check
@@ -59,6 +60,10 @@ Below are some examples of OS versions for each operating system:
* Windows 11, version 23H2: `10.0.22631`
* Windows Server 2022, Version 21H2: `10.0.20348`
### Peer Network Range Check
The peer network range check verifies if a device is in certain IP ranges before it can connect. This check is useful when wanting to control access based on the network location of a peer. For example, disabling a connection to a routing peer when the peer is connecting from the office network range.
## Managing posture checks
@@ -83,7 +88,7 @@ Access the `Access Control` tab, then the `Posture Checks` section, and click `C
</p>
This will bring up a screen for configuring posture checks, where you can do your configurations.
This will bring up a screen for configuring posture checks, where you can configure settings.
<p>
<img src="/docs-static/img/how-to-guides/posture-check-create-list.png" alt="high-level-dia" className="imagewrapper"/>
@@ -129,7 +134,7 @@ Click `Browse Checks` and select the posture check we created earlier, `NetBird
<img src="/docs-static/img/how-to-guides/policy-posture-checks-select.png" alt="high-level-dia" className="imagewrapper"/>
</p>
The `Netbird Version` check will be assigned to the policy. Click `Save Changes` to save the policy updates.
The `NetBird Version` check will be assigned to the policy. Click `Save Changes` to save the policy updates.
<p>
<img src="/docs-static/img/how-to-guides/policy-posture-checks-assigned.png" alt="high-level-dia" className="imagewrapper"/>
</p>