ACL in Firewall

Posted on 2005-05-10
Last Modified: 2013-11-16
Dea All

I have a group of 60 users, I want to give them the access to the internet only and to prevent them from accessing Msn and other sites.

Question by:ibmas4002
    LVL 13

    Expert Comment

    It depends on your firewall, what do you have ?

    Your best bet is probably to use a filtering proxy server like Web Marshal, Suff Patrol, Squid, etc as these are deisgned to blcok content, whereas most firewalls don't do content filtering as good as these purpose-made products.
    LVL 12

    Expert Comment

    Agree...regular firewalls may not be able to do the job...i suggest you can install these kind of content blocking softwares along with ISA or your proxy...of if you want to block the HTTP access from your work place n give access to mail then its much easier...
    LVL 12

    Expert Comment

    Or as your title suggests if you want to do the job with simple ACL...i am afraid it may not possible..theoretically its possible but there are plenty of work arounds that end user can use to bypass tht...
    LVL 9

    Accepted Solution

    With just an ACL most FW's are top down. so you would simply put a blocking acl from the users IP to the destination group of IP.s which ofc would mean you would have to figure out what all you want to block and add them to that group. then put an allow acl underneath.

    But I aggree you should use a proxy server.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now