Advertisement

02.09.2008 at 04:21AM PST, ID: 23149943
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
8.2

Blocking file extensions for specific users

Asked by TimMcGrath in MS Forefront-ISA, Windows Networking, Enterprise Firewalls

Tags: , , ,

Hello all,

I have an ISA Server 2004 installed on a 2003 server it is part of a domain. I am trying to block file extensions for specific users. I have an access rule setup with basic protocols for client access to the internet. I copied that rule, renamed it and placed it in front of the original rule. I then edited the http filter in the new rule with the file extensions I wanted to block. Then added the user groups that I wanted to block.  With the understanding that if you are not in the group you would pass through to the next client access rule and have access as usual. The extension blocking works fine for the group, and those not in the group that are members of the domain do not skip a beat. The issue is.... is if you are not a member of the domain, you get prompted for credentials when accessing the internet. Now this wouldn't be a bad thing except that we are a school district and allow guest to have internet access through a "guest" wireless.  Once connected to the guest SSID you are redirected to a web portal to sign in with a guest account. When I enable the rule with the file extension blocking, guests are being prompted for credentials when they open up internet explorer. The monitoring log shows authentication failure, then   deny  by the "blocking" rule. It doesn't pass down to the allow client access rule, even though the guest is not a member of any of the groups assigned to the blocking rule.  I am using DHCP to push out WPAD to the clients for the proxy settings.

Any help or ideas is greatly appreciated.

Thanks!Start Free Trial
[+][-]02.09.2008 at 04:40AM PST, ID: 20857071

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: MS Forefront-ISA, Windows Networking, Enterprise Firewalls
Tags: Microsoft, ISA 2004, sp2, Blocking file extensions for specific users
Sign Up Now!
Solution Provided By: keith_alabaster
Participating Experts: 1
Solution Grade: A
 
 
[+][-]02.09.2008 at 06:27AM PST, ID: 20857333

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 12:16AM PST, ID: 20900084

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 10:46AM PST, ID: 20904668

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 01:38PM PST, ID: 20906243

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 01:42PM PST, ID: 20906280

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 02:05PM PST, ID: 20906472

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.15.2008 at 02:07PM PST, ID: 20906484

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.26.2008 at 04:36PM PST, ID: 20990382

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 04:14AM PDT, ID: 21132145

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 04:42AM PDT, ID: 21132216

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 06:34AM PDT, ID: 21132463

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 06:40AM PDT, ID: 21132483

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 07:18AM PDT, ID: 21132584

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.15.2008 at 07:37AM PDT, ID: 21132641

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628