User Guide: AMF Security mini version 1.7.0

# How to use the setting page

Navigation menu
Searching and Sorting in Tables
Search
Sort
Toggling Order
Apply Configuration Changes
Software being used by AMF Security mini

This section describes the basic screen configuration of the setting page and how to operate it.

## Navigation menu

- Navigation menu is located at the top of the screen.

  Clicking a menu item opens drop-down sub-menu. Clicking a sub-menu item opens the screen corresponding to the item.

## Searching and Sorting in Tables

The following pages have controls to search, filter or sort items in tables.

- Device > Device List
- Device > MAC Address List
- Device > Active Device List
- Group > UnAuth Group List
- Switches > AMF Member List
- Switches > Active AMF Member List
- Policy Settings > Network List
- Policy Settings > Location List
- Policy Settings > Schedule List
- Policy Settings > Action List
- System Settings > System Information
- System Settings > Action Log

The next table shows which columns can be searched, filtered and sorted on each page.

Table 1: Target columns for search, filter and sort operations
Page | Item Name | Search | Filter | Sort | Note
--- | --- | --- | --- | --- | ---
Device > Device List | Device ID | × | − | × |
Tag | × | − | × |
Note | × | − | × |
Number of Policies | × | − | × |
Number of Interfaces | × | − | × |
Interface: MAC Address* | × | − | × | * This column is not displayed on the screen.
Interface: Name* | × | − | × | * This column is not displayed on the screen.
Interface: Note* | × | − | × | * This column is not displayed on the screen.
Device > MAC Address List | MAC Address | × | − | × |
Name | × | − | × |
Device ID | × | − | × |
Note | × | − | × |
Device: Tag* | × | − | × | * This column is not displayed on the screen.
Device: Note* | × | − | × | * This column is not displayed on the screen.
Device > Active Device List | MAC Address | △* | − | × | * Only the strings after "mac=" and "ip=" can be matched.
Device ID | △*1 | − | △*2 | *1 "Unregistered" cannot be matched. For devices connected or detected in an UnAuth group, only strings after "group=" can be matched. *2 Sorted in the order of "Unregistered", "UnAuth Group ID", "Empty" and "Device ID".
Connected Switch | △*1 | − | △*2 | *1 The strings after "id=" and Switch Port Number after "port=" can be matched. *2Only sorted by the string after "id=". Sorting by the string after "port=" is not supported.
Connecting Network | △*1 | − | △*2 | *1 Only VLAN ID after "vlan=" and Network ID after "id=" can be matched. "Untagged" and "No Connection" cannot be matched. *2 Sorted in the order of "No Connection", "Empty", "vlan=Untagged" and "vlan=1-4094". Sorting by Network ID is not supported.
Status | × | × | △* | * Sorted in the order of "Authorized", "Blocked", "Link-Down", "Quarantined", "Authentication Failed", "Detected" and "IP-Filter".
Group > UnAuth Group List | Group ID | × | − | × |
Enabled | × | − | × |
Note | × | − | × |
Number of Policies | × | − | × |
Switches > AMF Member List | Name | × | − | × |
Note | × | − | × |
Switches > Active AMF Member List | Name | × | − | × |
Registration Status | × | − | × |
Domain Name | × | − | × |
Latest Access | × | − | × |
Policy Settings > Network List | Network ID | × | − | × |
VLAN ID | × | − | × |
Note | × | − | × |
Policy Settings > Location List | Location ID | × | − | × |
Note | × | − | × |
Number of Switches | × | − | × |
Policy Settings > Schedule List | Schedule ID | × | − | × |
Start Date / Time | × | − | × |
End Date / Time | × | − | × |
Note | × | − | × |
Policy Settings > Action List | Action ID | × | − | × |
Priority | × | − | × |
Condition | △* | − | × | * Only the strings after "mac=", "ip=", "device-name=", "tag=", "location=", "switch=" and "network=" can be matched.
Action (OpenFlow/AMF) | △*1 | − | △*2 | *1 Only the strings after "Pass(Permit)", "Drop(Block)" and "Quarantine" can be matched. AMF Action after them cannot be matched. *2 Sorted in the order of "Pass(Permit)", "Drop(Block)", "Quarantine" and "Log-Only". Sort by the AMF Action is not supported.
Requester | × | − | × |
Reason | × | − | × |
System Settings > Account List | Account Name | − | − | × |
System Settings > Action Log | Duration | × | − | − |
MAC Address | × | − | − |
Device IPv4 Address | × | − | − |
Device Tag | × | − | − |
Action Originator | × | − | − |
Status | − | × | − |

### Search

- A range of currently displayed items and a total number of items are shown above each table in the form of "RANGE / TOTAL". You can also change the maximum number of items displayed on a page by using the drop-down menu.

- You can filter items to display by entering keywords in the search form.
  If you enter multiple keywords separated by space, only items matching all the keywords are displayed. (AND search)
  When you filter items, matched texts are highlighted in red. Matched texts are highlighted even when they are in the columns which cannot be matched.

- On the Device > Active Device List page, you can filter items by the status of Devices using drop-down menu.

  Table 2: Status Dropdown Menu
  Option | What is displayed
  --- | ---
  All | All the devices in any of the Authorized, Blocked, Link-Down, IP-Filter, Quarantined, Authentication Failed or Detected status.
  Authorized | Devices matching the security policy for the registered device or UnAuth group.
  Blocked | Devices which were blocked by an instruction of an external system or an operation of an administrator.
  Link-Down | Devices which are being blocked by the AMF Application Proxy's Link-Down action.
  IP-Filter | Devices which are being blocked by the AMF Application Proxy's IP-Filter (Layer 3) action.
  Log-Only | Devices for which logs were generated without taking any actions.
  Quarantined | Devices which were moved to quarantine network by an instruction of an external system or an operation of an administrator.
  Authentication Failed | Devices which failed to authenticate because they were not registered or they did not match any security policy.
  Quarantined | Blocked | IP-Filter | Authentication Failed | Devices which are in any of the Quarantined, Blocked, Link-Down, IP-Filter or Authentication Failed status.
  Detected | Devices detected by device detection using the UnAuth Group.

### Sort

You can sort items by clicking small buttons next to the column headers.

#### Toggling Order

Sort order is toggled between ascending > descending > default order whenever you click the same button.

- Status columns are sorted in the following orders.
  - Authorized > Blocked > Link-Down > Quarantined > Authentication Failed > Detected > IP-Filter > Log-Only
- VLAN ID / Network ID is sorted in the order of No Connection > Untagged > VLAN ID (1-4094).

## Apply Configuration Changes

Each setting page has the "Submit" button. After entering the settings on each setting page, be sure to click the "Submit" button before moving the page.
When you click the "Submit" button, the changes you made on the page are immediately applied to the AMF Security mini's operation.

> Note

> > There are some pages without the "Submit" button because they are read-only and do not have any configuration element to change.

## Software being used by AMF Security mini

You can view the list of names and licenses of the software used by AMF Security mini.

18 Jan 2021 10:56