Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Restrict Internet Access for specific users in ISA 2004 without restricting internet access to PC that does not have firewall client installed

Posted on 2010-09-08
7
Medium Priority
?
722 Views
Last Modified: 2012-05-10
Well the title says it all...

I need to restrict Internet access for a specific user (not a machine because that user moves from PC to PC).

I am able to do that in ISA 2004 by doing a simple rule that denies access for protocol HTTP/HTTPS from the internal to the external. In the apply to field, I created a No Internet group and I included that user in it.

The rules works well but when it is enabled if I have a PC that does not have the Microsoft Firewall Client for ISA Server 2004 installed, the Internet is restricted for any user loggued on that PC as well... This is a problem because we have Linux/MAC boxes and I cannot restrict them Internet access...

Is there a way I can create a rule that will restrict that specific user while letting the non-firewall client machines accessing the Internet?

Thank you
0
Comment
Question by:Vision_Globale
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 23

Accepted Solution

by:
Suliman Abu Kharroub earned 1500 total points
ID: 33632858
No, you cant do so in ISA 2004 nor ISA 2006 . because Secure NAT clients dont support authentication.

As work around, you can use DHCP reservation to assign ips to these clients and create rules on isa based on computers not users ( for all users groups).
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 33632868
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 33632878
also you can use web proxy because it support authentication.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 2

Expert Comment

by:aimcitp
ID: 33635827
Sulimanw is correct. Set up a rule to deny access for a computer set (include that computer in it) . May get real crazy after assigning a static IP address to that computer and make a group policy for that one machine and assign the ISA as its web proxy... Depends on how much you want to do...
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 33636964
Web proxy will make the trick, just you need to configure ISA clients as only web proxy clients .
0
 

Author Comment

by:Vision_Globale
ID: 33640163
Ok thank you!

That's what I though but I wanted a confirmation.
0
 

Author Closing Comment

by:Vision_Globale
ID: 33640171
Good
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Forefront Threat Management Gateway 2010 or FTMG comes with some very neat troubleshooting tools built-in when trying to identify what is actually happening behind the scenes within the product when traffic is passing through its interfaces. To the …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question