Client IP address range allows administrators to specify a range of IP addresses that represent the computers the Gateway Enforcer appliance must authenticate. Computers with addresses outside the Client IP address range are allowed to pass through the Gateway Enforcer appliance without requiring the client software or other authentication.
The reasons for using Client IP address ranges include:
Allowing network access to external Web sites
Authenticating a subset of clients