DriveWorks Pro 23

Trust Zones

Trust Zones

Trust Zones add extra control over access to Pro Server and DriveWorks Login, beyond the required Firewall settings.

We advise working with your IT Administrator/Department to set these up.

Pro Server has default Locations and Zones to ensure that Pro Server can be accessed without having to alter any Trust Zones.

When you know the IP Address or Range it is assigned to a Location. You can add multiple Addresses or Ranges if required.

Once the Location is setup, it can be Mapped to a Zone. The Zone determines the access to DriveWorks Pro Server and DriveWorks Login.

Locations

This allows CIDR (Classless Inter-Domain Routing) IP Ranges to be applied to a Location which can then be mapped to a Zone.

See Default Zones and Locations below, for the default locations provided in Trust Zones.

Add

The default locations include CIDR IP Ranges taken from the local network on which DriveWorks Pro Server is installed.

In the majority of cases this allows all other DriveWorks modules on the local network connection and access to DriveWorks Pro Server.

A Location and IP Range will only need to be added for more complex networks, or to give remote users access.

Add a new location to the location list.

1. Click Add..
2. Enter a name for the new location, click Add to add the new location to the list.

Once a location exists a CIDR IP Range is required to be added.

Edit

Edit the name of the location as displayed in the location list.

1. Select the location Name from the location list.
2. Click Edit.
3. Enter the new name for the location in the Edit Location dialog.
4. Click Save Changes.

Delete

Deletes the location from the location list.

1. Select the location Name from the location list.
2. Click Delete.
3. Click Yes from the Delete Location confirmation dialog.

Add IP Range

The default locations include CIDR IP Ranges taken from the local network on which DriveWorks Pro Server is installed.

In the majority of cases this allows all other DriveWorks modules on the local network connection and access to DriveWorks Pro Server.

A Location and IP Range will only need to be added for more complex networks, or to give remote users access.

Add IP Range to the selected location.

1. Select the location Name from the list.
2. Click Add IP Range....
3. Enter the IP Range.

   If you are unsure if the connection is utilizing IPv4 or IPv6 routing both versions can be added to the one location.

   How to determine the IP Range of the machine that requires connection to Pro Server

   On the machine that requires connecting to Pro Server:

   1. Open Windows Command Prompt.
   2. Type ipconfig.

      More information on ipconfig can be found in the Microsoft Learn topic ipconfig.

   3. press Enter on the keyboard.
   4. Copy the results of the IPv4 Address and IPv6 Address into the Add IP Range dialog on the DriveWorks Pro Server machine.

      These will need to be added separately.

      It is possible to use CIDR to convert many IP addresses into a range.

      We recommend consulting with your IT specialist before adding a CIDR IP Range.

4. Click Add.
5. Repeat for any additional IP Ranges that are required for the location.
6. Next map the location to a Zone (see Zones below).

Remove IP Range

Removes the selected CIDR IP Range from the selected location.

1. Select the location Name to have the IP Range removed from the list.
2. Click Remove IP Range.
3. From the Remove IP Range dialog, select the IP Range to be removed.
4. Click Remove.

Zones

Control access to the Pro Server Web Application and DriveWorks Login (logging into a Shared Group).

See Default Zones and Locations below, for the default zones provided in Trust Zones.

Add

Add a new Zone to the list.

1. Click Add..
2. Enter a name for the new zone.
3. Select the access levels required for the zone:
   • Allow Web Access - Allows users in this Zone to access the DriveWorks Pro Server Web Application.
   • Allow DriveWorks Login - Allows users in this zone to log in to Shared Groups from all DriveWorks Modules.
4. Click Add in the Add New Zone dialog to add the new zone to the list.

Edit

Edit an existing Zone in the list.

1. Select the location Name from the location list.
2. Click Edit.
3. Edit the name of the zone and access levels in the Edit Zone dialog.
4. Click Save Changes.

Delete

Delete a Zone from the list.

1. Select the zone Name from the zone list.
2. Click Delete.
3. Click Yes from the Delete Zone confirmation dialog.

Map Location

Map a location to a Zone.

1. Select the zone Name from the zone list.
2. Click Map Location.
3. Select the location to map from the Location Name drop down list.

   Locations that are already mapped to the zone will not be displayed in the drop down list.

4. Click Map from the Map Location to Zone <selected zone name> dialog.
5. Repeat for any additional location that are required to be mapped to the zone.

Unmap Location

Unmap a location from a Zone.

1. Select the zone Name from the zone list.
2. Click Unmap Location.
3. Select the location to unmap from the Location Name drop down list.
4. Click Unmap from the Unmap Location from Zone <selected zone name> dialog.
5. Repeat for any additional location that are required to be unmapped from the zone.

Default Zones and Locations

Pro Server has three locations and two zones set up by default.

Locations:

• Local Addresses - The loopback addresses on your machine.
• Local Private - The private addresses picked from the network interfaces on your machine.
• Local Public - Any IP addresses found from your network interfaces that aren't in the previous categories. This is likely to be empty unless you manually assign an IP address to your network adapter.

Zones:

• Local Connections - Mapped to the Local Addresses Location. This cannot be edited as it ensures you always have access to Pro Server on the machine it's installed on through localhost.
• Trusted - Mapped to the Local Private Addresses Location. This allows access to Pro Server and DriveWorks Logins over private IP addresses. This zone can be modified or deleted if required.