Apex One provides a location awareness feature that determines whether the Security Agent is in the internal or external network. Location awareness is leveraged in the following Apex One features and services:

• Web Reputation
• Data Loss Prevention
• Device Control

The location of the Security Agent determines whether the Security Agent applies internal or external policy settings. Administrators typically enforce a stricter policy for external Security Agents .

Location Criteria
Specify whether location is based on the Security Agent endpoint 's gateway IP address or the Security Agent 's connection status with the Apex One server or any reference server.

• Agent connection status: If the Security Agent can connect to the Apex One server or any of the assigned reference servers on the Internet, the endpoint's location is internal. Additionally, if any endpoint outside the corporate network can establish connection with the Apex One server/reference server, its location is also internal. If none of these conditions apply, the endpoint's location is external.
• Gateway IP and MAC address: If the Security Agent endpoint's gateway IP address matches any of the gateway IP addresses you specified on the Endpoint Location screen, the endpoint's location is internal. Otherwise, the endpoint's location is external.

Procedure

1. Go to Agents → Endpoint Location.
2. Choose whether location is based on Reference servers or Gateway IP and MAC address.
   • Reference servers: Security Agents that can connect to a reference server are part of the internal network
     For more information, see Reference Servers.
   • Gateway IP address: Security Agents that can connect to a gateway are part of the internal network
     1. Type the gateway IPv4/IPv6 address in the text box provided.
     2. (Optional) Type the MAC address.
     3. Click Add.

        Note If you do not type a MAC address, Apex One includes all the MAC addresses belonging to the specified IP address.

3. Click Save.