Solved

Configure Firefox (or IE) to allow only certain specified sites

Posted on 2010-11-23
10
1,592 Views
Last Modified: 2013-12-08
Is there a way to configure Firefox (or IE) to allow only certain specified sites?  I know I can block certain sites, but I want to allow only a few sites and block everything else.  This will be done on our Citrix server so that any web browsing by any user with that browser (one or the other) on the Citrix server will be restricted.  Thanks.

~bruno71
0
Comment
Question by:bruno71
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34200068
If you want to allow only a few sites, perhaps its better to try to do it by means of routing.
On Citrix only allow routes to those sites (by means of a logon script or equal).
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34200101
And don't give them a default gateway (to the internet).
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34205692
Use a fake Proxy, but allow the sites you want to bypass it......

Windows SteadyState installation extracts some .adm files, and one of them is to Block Internet Access....

Just install it on a test box, and grab the .adm files to import into a GPO.....

http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

You can use the native policy as well, but I post this one, as thier might be other settigns youd like to use to lockdown the profiles.....

FYI, this is for IE.... I assume you could do similar in FF, but not sure on the exact steps....
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 37

Expert Comment

by:bbao
ID: 34210285
for IE, you may try Content Advisor, the built-in functionality to control web access.

HOW TO: Use the Internet Explorer 6 Content Advisor to Control Access to Web Sites in Internet Explorer
http://support.microsoft.com/kb/310401
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34225429
Fyi, content advisor would have issues on sites with a lot of JavaScript. Tried to implement once on a JS intensive site, and had to get the address of every darn button... Not bad for simple sites though...
0
 

Author Comment

by:bruno71
ID: 34242225
I've tried Content advisor before, but it's not quite as clean as I would like.

I don't want to lock down the entire Citrix server, but just one browser.  For instance, I want to lock down IE because it will be published to employee training terminals for access to just specific sites.  But I want to leave Firefox open for normal users who may have a link in an email to open, etc.

I don't care which is locked down and which is open.

~bruno71
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34245151
IE is easier to lock down via GPO (Fake Proxy/Allowed websites listed to "bypass").....

Firefox would need to be scripted and deployed.....
0
 

Author Comment

by:bruno71
ID: 34248117
johnb6767,

Can you direct me to those specific GPO settings?  I've only done a little with GPO before and can get lost in the jungle of policies.  Thanks.

~bruno71
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 34254849
http://www.esoft.com/support_docs/GroupPolicyEditor.pdf

Some good screenshots.... Just use a bogus proxy like 127.0.0.1, and make sure you add teh sites you want EXCLUDED in the right hand box.....
0
 

Author Comment

by:bruno71
ID: 34259862
Thanks John...that worked great.  It also affected Firefox, but in the Firefox settings I changed it from "Use system proxy settings"  to "No proxy".  It seems to be working.  Thanks again.

~bruno71
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
download a file from webmail to ipod 2 61
Chrome: How to show the Bookmarks bar? 4 47
Chrome and Firefox Java 5 52
Adware on Android hooked into Chrome 6 25
I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question