https://community.extremenetworks.com/t5/extremeswitching-exos-switch/acl-for-web-http/m-p/74866#M19228 Hi Zach,<BR /><BR />There is an article on this here:<BR />https://extremeportal.force.com/ExtrArticleDetail?an=000078659<BR /><BR />This will permit/deny access to the EXOS Web GUI itself. Note that this does not apply to SSH/Telnet/SNMP, which have access-profiles of their own, search our user guide or the knowledge base for more details there.<BR /><BR />Regarding your XMC/NAC setup, I believe that XMC now does a lot of polling via the switch's RESTAPI, so it's a good idea to allow XMC through. Not 100% sure on NAC, but if your workflows aren't working or you're having issues with enforcing from XMC/NAC, I'd add the NAC IP as well. Fri, 28 Jan 2022 23:26:18 GMT Gabriel_G 2022-01-28T23:26:18Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/acl-for-web-http/m-p/74865#M19227 I am unable to find any information regarding this. I am trying to setup an ACL to restrict access to the switch ENTIRELY except for the IP for XMC.&nbsp;<BR /><BR />I am unable to figure out how to include the web http module (the EXOS webpage for configuring the switch)&nbsp;<BR /><BR />I'm also curious if this will affect the ability of our captive portal and NAC working - or should that IP be included as allowed as well? Thanks. Thu, 27 Jan 2022 17:41:24 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/acl-for-web-http/m-p/74865#M19227 ZachN 2022-01-27T17:41:24Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/acl-for-web-http/m-p/74866#M19228 Hi Zach,<BR /><BR />There is an article on this here:<BR />https://extremeportal.force.com/ExtrArticleDetail?an=000078659<BR /><BR />This will permit/deny access to the EXOS Web GUI itself. Note that this does not apply to SSH/Telnet/SNMP, which have access-profiles of their own, search our user guide or the knowledge base for more details there.<BR /><BR />Regarding your XMC/NAC setup, I believe that XMC now does a lot of polling via the switch's RESTAPI, so it's a good idea to allow XMC through. Not 100% sure on NAC, but if your workflows aren't working or you're having issues with enforcing from XMC/NAC, I'd add the NAC IP as well. Fri, 28 Jan 2022 23:26:18 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/acl-for-web-http/m-p/74866#M19228 Gabriel_G 2022-01-28T23:26:18Z