Sharing definitions across Kerio Control appliances with MyKerio
NOTE
MyKerio applies Shared definitions only to Kerio Control appliances. Also, this feature is only available in Kerio Control 9.0 and newer.
MyKerio allows you to share definitions for IP address groups, URL groups and time ranges across Kerio Control appliances.
You can share definitions among all the Kerio Control appliances within one organization. You can:
- Create definitions directly within MyKerio and share them across appliances within the same organization
- Import definitions from an existing Kerio Control appliance and share them with other Kerio Control appliances within the same organization
If you create shared definitions in MyKerio that already exist in the appliance, MyKerio converts them to shared definitions.
Once your Kerio Control appliance uses shared definitions, you manage these definitions in MyKerio, and they become read-only in the appliance.
You can also create and keep definitions directly in Kerio Control appliances. These local definitions cannot be shared with other Kerio Control appliances.
Defining shared IP address groups
In the IP Addresses section, you can create:
- Single IPv4 or IPv6 addresses
- Groups of IPv4 or IPv6 addresses
- Hostnames
- IP address ranges for IPv4 or IPv6
- IPv4 subnets with masks
- IPv6 prefixes
Kerio Control uses predefined IP address groups in other configuration dialog boxes, such as those for traffic and URL rules.
Adding new IP address groups
To create a new IP address group, you must first create a new definition group and then add new items:
- In MyKerio, go to Shared Definitions > IP Addresses.
- If you have more than one organization, select the appropriate one.
- In the toolbar, click the + icon.
- In the Add IP Address Group dialog box, type a name for the group.
- Click Add. MyKerio creates a new IP address group and you can add items.
- Click the + icon on the row with the IP address group name.
- In the Add IP Address dialog box, select one of the following:
- Addresses - Type the IP address, range, network, subnet, or prefix. Click the Address Examples link for all patterns accepted by Kerio Control.
- IP Address Group - Type another group of IP addresses. Groups can be cascaded.
- Firewall - Firewall is a special group that includes all the firewall's IP addresses.
IMPORTANT
If you add a domain name, you must use the Kerio Control DNS server and enable the DNS cache.
If you use an IP address or host name you can use any DNS server.
- (Optional) In the Description field, type a description of the item.
- Click Add.
Importing existing Kerio Control IP address groups
To import shared IP address groups from Kerio Control to MyKerio, you must first select the organization where the appliance is included and then import IP address groups. Imported groups are automatically shared with other Kerio Control appliances in the organization.
- In MyKerio, go to Shared Definitions > IP Addresses.
- Select the appropriate organization.
- Click in the toolbar.
- In the Import Shared Definitions dialog box, select the appliance from the drop-down list.
- Select the groups you want to share.
- Click Import.
From now on, you can see the IP address groups you selected both in the organization in MyKerio and in all Kerio Control appliances included in the same organization.
Defining shared URL groups
URL groups enables you to define content rules in Kerio Control. For example, to disable access to a group of web pages, you can define a URL group and assign permissions to the group, rather than defining permissions for each individual content rule. A URL group rule is processed faster than a larger number of separate rules for individual URLs.
Adding new URL groups
To create a new URL group, you must first create a new definition group and then add a new URL/URL group or regular expression:
- In MyKerio, go to Shared Definitions > URL Groups.
- If you have more than one organization, select the appropriate one.
- In the toolbar, click the + icon.
- In the Add URL Group dialog box, type a name for the group.
- Click Add. MyKerio creates a new URL group and you can add items.
- Click the + icon on the row with the URL group (see figure below).
- In the Add URL dialog box, add a URL or another URL group. A URL can be specified by using:
- The full address of a server, document or web page without protocol specification (http://).
- Substrings with wildcard characters: * or ?: An asterisk (*) stands for any number of characters, a question mark (?) represents one character.
- Regular expressions. For details, see Wildcards and regular expressions in URL
- (Optional) In the Description field, type a description for the URL. Especially if you use a regular expression, you should provide a description.
- Click Add.
Importing existing Kerio Control URL groups
To import shared URL groups from Kerio Control to MyKerio, you must first select the organization where the appliance is included and then import URL groups. Imported groups are automatically shared with other Kerio Control appliances.
- In MyKerio, go to Shared Definitions > URL Groups.
- Select the organization.
- Click in the toolbar.
- In the Import Shared Definitions dialog box, select the appliance from the drop-down list.
- Select the groups you want to share.
- Click Import.
From now on, you can see the imported URL groups for the selected organization both in MyKerio and in the individual Kerio Control appliances included in the same organization.
Defining shared time ranges
Time ranges define when Kerio Control rules should be valid.
Each time range can consist of multiple time spans with different settings.
Adding new time ranges
To create a new time range, you must first create a new definition group and then create a new time range item:
- In MyKerio, go to Shared Definitions > Time Ranges.
- If you have more than one organization, select the appropriate one.
- In the toolbar, click the + icon.
- In the Add Time Range Group dialog box, type a name for the time range.
- Click Add. MyKerio creates a new time range and you can add items.
- Click the + icon on the row with the time range (see figure below).
- In the Add Time Range dialog box, configure the frequency, start and end times and days, if applicable.
- Click Add.
All Kerio Control appliances in the organization KERIO can now see and use the new shared time range.
Importing existing time ranges
To import time ranges from Kerio Control to MyKerio, you must first select the organization where the appliance is included and then import the time ranges. Imported time ranges are automatically shared with other Kerio Control appliances.
- In MyKerio, go to Shared Definitions > Time Ranges.
- Select the organization.
- Click in the toolbar.
- In the Import Shared Definitions dialog box, select the appliance from the drop-down list.
- Select the time ranges you want to share.
- Click Import.
From now on, you can see selected time ranges for the selected organization in both MyKerio and the individual Kerio Control appliances included in the same organization.