Re: disabling all internet access



I agree with Robert in that a simple solution is to not use the real default
gateway. Having said that if your users are local administrators or can
become local administrators by malicious action they would be able to detect
and reconfigure the default gateway on the computer so that is something you
would want to monitor [default gateway and membership of administrators
group] and also periodically review the security logs via Event Viewer on
the computer and if it is XP Pro enable auditing of account management in
Local Security Policy. --- Steve


"Bryan" <bryan10@xxxxxxxxx> wrote in message
news:OYPXADIHGHA.1032@xxxxxxxxxxxxxxxxxxxxxxx
>I have a Point of Sale (POS) application running on a windows XP client.
>This system is connected to my network. My network has internet access
>through a low-end NAT router (D-link DI-604).
>
> I do not want the POS client to be able to access the Internet, either
> through IE or if a user installs a chat-client.
>
> What is the best way to secure a windows XP client from accessing the
> Internet, yet still be able to access a network peer server. I would
> prefer to control this at the client rather than installing other
> components on my file server.
>
> Thanks
>


.



Relevant Pages

  • RE: ISA 2004 Firewall Client and ActiveSync 4.2
    ... at home in my WLAN all internet ... that killing my default gateway is not the way ... gateway and the appropriate DNS server entries. ... server internal IP then your client works as a secureNAT client and you're ...
    (microsoft.public.isa.clients)
  • RE: sbs and gateways
    ... point the default gateway to the router, the client is unable to browse the ... If the default gateway is pointing to the internal NIC of the SBS ... When an internal client attempts to access the internet, ...
    (microsoft.public.windows.server.sbs)
  • RE: Clients Need Access to 3rd Party FTP Sites
    ... How to configure Internet access in Windows Small Business Server 2003 ... >SBS box. ... >> If you use the SBS as the gateway, you may not able to browse the ... >> the client? ...
    (microsoft.public.windows.server.sbs)
  • VPN with Windows XP ICS
    ... Both PC's have Cisco VPN Client v4.0.5 installed. ... The gateway is assigned ... I am required to VPN to my school in order to access subscription services. ... the client can surf the Internet without a problem through the gateway ...
    (microsoft.public.windowsxp.network_web)
  • Re: ZoneAlarm Pro ICS problem
    ... >>the instructions on the ZA site for setting up Internet Connection ... > Have it on ICS gateway with Network 192.168.0.0/255.255.255.0 and IP ... > Address of 192.168.0.1, Internet Zone Security is High, Trusted Zone ... > Have it also on client PC with Network 192.168.0.0/255.255.255.0 and IP ...
    (comp.security.firewalls)

Quantcast