block-lan [Privatise Knowledgebase]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=== Understanding Block Local Area Network (LAN) Functionality ===

Blocking the LAN is an important part of security functionality for businesses that require it. Privatise allows you to block the LAN and give the user only access to the Privatise network.

In order to enable printers to work over the LAN with Block LAN enabled, the printer must have a static internal IP, and that IP should then be added to the "Allow List" in the Company Dashboard on the left sidebar.

The syntax currently for adding IPs is https://192.168.12.5. 

----


=== What about users on home networks? ===

There are three options for dealing with users on home networks, where you want to make sure they have printer access with Block LAN enabled.

1. You can enable Trusted Networks in the General Settings section on the left sidebar in the Company Dashboard. That will allow the user to add their home network to Trusted Networks in the Privatise agent, and disable Privatise on the home network.

2. If you want to enable Block LAN but allow access to printers in home networks without disabling Privatise: You will need to get a list of the Printer IPs for your home users, and add those to the Allow List. 

3. The last option is if your user is on a desktop in their home and not a laptop that they bring into the office, or are using a laptop that they don't bring into the office. In that case you can:

A. Create a new group in the left sidebar under Manage.

B. In the new group, go to "Link to ROC" and make sure to link it to your main ROC account if relevant.

C. In "Add or Remove Devices", add the home devices to the new group, with Block LAN unchecked in the general settings.


----

=== Why can't users add printers themselves to the exception list? ===

By design, Privatise doesn't give users granular control over their own settings for security reasons. This has to be managed by the IT administrator(s). However, you do have the option of enabling Trusted Networks in general settings and allowing your users to set their home network to a Trusted Network. 

You also have the option of making sure "Always-On" is disabled and asking the user to temporarily turn Privatise off when printing.