IT Employment

Ask something
Discussion Locked

routing internet and intranet traffic

0 helpful
5 replies

by tacohell

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

My company have decided to implement an intranet.
About 40% of our staff does not internet access and will be granted access only to the INTRANET.
This is my setup:
Primary network is NOVELL 5.1 everybody logs in to the novell nds, we also have an NT4 domain and use Checkpoint firewall for security.
we are hosting our own web site (iis 4.0)
The INTRANET will be hosted on another server different that the one we use to host our website.
Question?
What is the smartest way to block all my INTRANET users to go into the internet, besides using checkpoint firewall rules?
Thank you

5 replies

by steve.hardman

It's rather difficult to determine the best method without more info, however, assuming there is some kind of layer 3 routing device in your network you can use access lists to allow/deny specific traffic to specific interfaces.

by tacohell

Any other solution, besides Access list?
I am still trying to figure out to how manage these users.

Thank you

by don-bans

Use an HTTP proxy that authenticates its users. This way, only users that have accounts in the proxy may have Internet access. This proxy maybe a MS proxy server. If this is the case, install NDS for NT on the proxy server and control who have access to the proxy services via NDS. Good luck.

Access list will be a very good solution on your routers/firewall. Not very manageable but an OK solution.

by paul.murray

I know you dont want to use checkpoint, but you can easily set up a rule to present a username/password box when a user tries to access a host outwith your network.
This enables us to give selected users access to the internet, and others only access to the intranet.
The ones that dont need access to the internet will not have a username assigned to them.

This discussion is closed to new replies.