---
title: "Firewall Catalog — Location page"
slug: "firewall-catalog-location-page"
tags: ["Reference", "ENS 10.7.x"]
updated: 2026-10-06T19:45:35Z
published: 2026-10-06T19:45:35Z
canonical: "docs.trellix.com/firewall-catalog-location-page"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Firewall Catalog — Location page

You can add or edit a location in the **Firewall Catalog**. (Windows & macOS only)

 
 
 

Click **+** (Add) or **-** (Delete) to add or remove items.

 
 
 
 

> [!NOTE]
> Note
> 
> IPv6 addresses are supported on Windows systems only.

| Option | Definition |
| --- | --- |
| **Name** | Specifies the name of the location. This field is required. |
| **Connection isolation** (Windows only) | Blocks traffic on network adapters that don't match the group when an adapter is present that does match the group. One use of this option is to block traffic generated by potentially undesirable sources outside the corporate network from entering the corporate network. Blocking traffic in this way is possible only if a rule preceding the group in the firewall policy hasn't already allowed it. When connection isolation is enabled and a NIC matches the group, the group allows traffic only when one of the following applies: - Traffic matches an **Allow Rule** before the group. - Traffic traversing a NIC matches the group and there is a rule in or below the group that allows the traffic. If no NIC matches the group, the group is ignored and rule matching continues. |
| **Trellix ePO reachability** | Enables the group to match only if there is communication with the Trellix ePO - On-prem server and the FQDN of the server has been resolved. |
| **Connection-specific DNS suffix** | Specifies a connection-specific DNS suffix in the format: <kbd>example.com</kbd>. |
| **Default gateway** | Specifies a single IP address for a default gateway in IPv4 or IPv6 format. For example: - **IPv4** — <kbd>192.168.254.1</kbd> - **IPv6** — <kbd>FD4A:A1B2:C3D4::E5F6</kbd> (Windows only) |
| **DHCP server** | Specifies a single IP address for a DHCP server in IPv4 or IPv6 format. For example: - **IPv4** — <kbd>192.168.254.200</kbd> - **IPv6** — <kbd>FD4A:A1B2:C3D4::E5F6</kbd> (Windows only) |
| **DNS server** | Specifies a single IP address for a domain name server in IPv4 or IPv6 format. For example: - **IPv4** — <kbd>192.168.254.200</kbd> - **IPv6** — <kbd>FD4A:A1B2:C3D4::E5F6</kbd> (Windows only) |
| **Primary WINS server** | Specifies a single IP address for a primary WINS server in IPv4 or IPv6 format. For example: - **IPv4** — <kbd>192.168.254.200</kbd> - **IPv6** — <kbd>FD4A:A1B2:C3D4::E5F6</kbd> (Windows only) |
| **Secondary WINS server** | Specifies a single IP address for a secondary WINS server in IPv4 or IPv6 format. For example: - **IPv4** — <kbd>192.168.254.200</kbd> - **IPv6** — <kbd>FD4A:A1B2:C3D4::E5F6</kbd> (Windows only) |
| **Domain reachability (HTTPS)** | Requires that the specified domain is reachable using HTTPS. |
| **Registry key** (Windows only) | Specifies the registry key and key value. 1. In the first field, specify the registry key in the format: <kbd>&lt;ROOT&gt;\&lt;KEY&gt;\[VALUE_NAME]</kbd> - **<ROOT>** — Use the full root name, such as HKEY_LOCAL_MACHINE, and not the shortened HKLM. - **<KEY>** — Key name under the root. - **[VALUE_NAME]** — Name of the key value. If no value name is included, it is assumed to be the default value. 2. In the second field after the equal sign, enter the data for the key value. > [!NOTE] > Tip > > To copy a registry key for pasting, right-click a key in the Registry Editor (run <kbd>regedit</kbd>) and select **Copy Key Name**. |
| **Notes** | Provides additional information about the group. |
| **Last modified** | Indicates the date, time, and person responsible for the change. |