My client wishes to restrict access to specific websites to certain workstations. We have a Sonicwall Pro 200 in place and I am able to restrict access using the customize tab on Filter by adding the domains/Domain IP but this kills access for all users. I tried to use Rules under access and deny access for a workstation by IP address to the WAN, destination the IP address of the website to be denied access. This did not work, I tried several variation on the rules. The websites they are trying to restrict are GMail and Facebook. Facebook has an entire range of IP addresses and I have had not luck denying access to 2 internal IP addresses in particular.
I have tried to deny via web browser, Windows and Kaspersky firewall, no luck.
Is the Sonicwall capable of doing this so I can centrally (at the server) accomplish this or does anyone have a solution?
thanks,
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Try Tools - Options - Security - Restricted Sites. Add the entries then Start - Run - gpedit.msc and remove access for the workstation to remove the settings (Administrative templates - Windows Components - Internet Explorer - Internet control panel - disable the security page). You could do this on the 2 pcs in question or use a domain global policy.
I contacted Sonicwall who said I needed and upgrade to accomplish what I wanted. I essence I ended up with an upgraded firewall that provided the group in which I could add the users and accomplish what Neod was asserting he could do with the Smoothwall. This accomplished what I wanted to do, central administration. Thanks to Anglo for his reply.
Business Accounts
Answer for Membership
by: neodPosted on 2009-11-04 at 10:18:33ID: 25742160
Hello:
I'm not an expert on SonicWall, but an expert on SmoothWall. In order to accomplish this, your SonicWall would need to have a way to authenticate different users or PC's by some method. Normally, this is accomplished either by IP address of each PC, local user authentication on the content filter or AD integration on the content filter.
An example is having a filter group that blocks certain IP's from going to certain sites while other IP's have un-filtered access in another filter group. Have a look and see if your SonicWall has any kind of way to tell the difference bewteen different users or PC's and/or the ability to create different filter groups for different users. I know SmoothWall SmoothGuardian can do any of these.
Hope this helps