Security Zones, Gateway Names Identifiers Nothing Works

Ignition
,
1

I am trying to setup a security zone using the gateway names identifier.

For testing I setup a label with an expression binding to the text property.

The expression I use is: isAuthorized(true,'SecurityZones/ACME')

The expression will evaluate either True or False. I can use the IP Address Identifiers field with success. I can use the Host Names Identifiers field with success. No matter what I enter in the Gateway Names Identifiers field the expression will evaluate false. Even when I just enter the wildcard ‘*’, which works in both the IP Address and Host Names, the expression evaluates to false. I have copied the gateway name off of the gateway home page. I have set up a tag binding to another label, binding the text property to [System]Gateway/SystemName and copied that to the gateway names identifiers field.

I’m out of ideas. Is this feature just broken, or am I missing something?

2

Perspective does not assign a Gateway name to the security zones bound to each client.

The only place Gateway names comes into play with security zones is when security zones are used to enforce service security over the Gateway network: Gateway A will check if Gateway B is in some zone based on Gateway A’s name, and if so, will enforce the policies configured on that zone when servicing requests over the Gateway network.

3

That helps. So The Gateway names don’t apply to clients being connected to a specific Gateway, but more so Gateways looking at each other.