Under “Rules” you decide per network who may reach what. The page has two lists: the devices in the network, and the local networks including the internet through the exit.
Until the network has rules of its own, the default applies
On the first save the default becomes rules in the network
Build a rule
The editor asks for a name, who the rule covers (all devices or single ones), where it applies and what is allowed. If something is missing, the field says what.
What: everything, ping, TCP or UDP, also with a port or port range
Optionally an expiry date
It applies only once you save; with DeskRanger Secure with one confirmation
Groups of devices
A group is a name with the devices in it; a device may be in several. In a rule you pick groups like single devices, for example “Office → Server, port 22 only”.
DeskRanger saves groups and rules together: a single confirmation
You delete a group used in a rule only after you have changed the rule
You create groups on Mac, Windows and Linux; phones show them in rules
Check beforehand
The test card below the lists answers beforehand whether a device may reach a target. It names the rule that decides and the path it would take.
If the default decides, it says so; otherwise the rule with number and name
The page names which device needs an update before you can save
How far rules reach
Rules protect against mistakes and against devices that cannot sign. They do not protect against a person holding a device with an approval key of your account.
The page itself says so in a notice
On iPhone, iPad and Android rules have a screen of their own