Re: Internet access

Hello,

the only "smart" way is to use a web proxy, that will authenticate and only let legitimate users surf the web.

Then, on the pix, block all outside connecctions from workstations, and let the proxy going out for http/https/ftp.

Microsoft ISA can be used, or third party proxy (squid, clearswift...)


--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"reptil" <c.reptil@xxxxxxxxx> wrote in message news:nlill3tkrprk8i728rfo4flrjsr8k6v4th@xxxxxxxxxx
Please help me with advice.

Now I have PIX firewall and he pass or stop IP adresses on internet,
but now I have situation that on one computer I have 10 users , but
only 2 users I must to pass to internet.

If I have server2003 and domain is it possible?

I saw that group policy have under user configuration option Internet
explorer restrictions, but if the use mozilla or something else group
policy not will be useful. How resolve this problem. Is there any
third-party software for make restricions on domain accounts.

Other idea is through group policy for each user set default gateway
and second DNS blank. Is it possible with group policy?

thnx for help

.

Relevant Pages

  • Re: Redirecting all Outgoing http traffic to an internal Web server
    ... that any traffic or traffic from specific vlans on port 80 or port ... 8080 (depending on whats your proxy port) be forwarded to the proxy ip ... L3 and pix. ... a mask for the destination to be matched. ...
    (comp.dcom.sys.cisco)
  • Re: HTTPS Using Web Proxy
    ... At first I was getting a error code: 502 Proxy Error and fixed that by ... the properties of the internal network object-web browser tab. ... I've just setup my ISA server's web proxy and tested it by ... they are visiting but when it comes to https traffic I get an ...
    (microsoft.public.isa)
  • Re: HTTPS Using Web Proxy
    ... "Kevin Longley" wrote: ... At first I was getting a error code: 502 Proxy Error and fixed that by ... I've just setup my ISA server's web proxy and tested it by ... they are visiting but when it comes to https traffic I get an ...
    (microsoft.public.isa)
  • Re: How to Prevent Non Proxy Use of Web Browsers
    ... IPs in my firewall rules through use of DNS objects. ... to *force* all web browsing to go through web proxy and forbid direct ... Client or as a Firewall Client. ...
    (microsoft.public.isa)
  • Re: Redirecting all Outgoing http traffic to an internal Web server
    ... proxy address) to an internal web server from the Pix 525 firewall. ... that won't work on a PIX or ASA. ... a mask for the destination to be matched. ...
    (comp.dcom.sys.cisco)