Networks

Ask something
Discussion Locked

Block Internet for some users timely

0 helpful
3 replies

by dannyadmin

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The senario is:

The network has DNS, DHCP servers and a firewall appliance which connects to the outside.

Everyone on the network get private IP info from the DHCP, the DNS is used to resolve URLs. Outgoing traffic is routed to the gateway which is the firewall IP address.

Now what I'm interested is to block certain users the ability to access the internet timely say for example, from 8:00AM to 5:00PM the internet access is blocked for them. I'm wondering which is the proper way to do it?

I have checked the setup of the firewall appliance. It doesn't allow the configuration for each individual users instead it just allows to block all traffics for all users and it's not in a way that you can configure it according to time.

Thank you in advance for any suggestions.

Danny

3 replies

by razz2

What is the make, model and firware revision of the firewall
appliance?

Most do have access restriction abilities, even consumer cable/
dsl routers. Perhaps there is a newer firmware for yours.

razz

by cg it

your gonna need something that has a little more granularity than your firewall appliance.

The only system I know that is configurable at the user level by Active Directory security groups [or a group you create to collect users into]is ISA Server [both 2000 and 2004].

All other software applications and appliances that I have seen [Symantec, 3Com, Cisco] do a blanket time block, block by IP [host] or block by service. You could do a block by host{S} to get some granularity in time blocking.

by ippirate

If you are using static IPs instead of dynamic in your DHCP scheme, i.e. addressing directly to MAC Addy you may be able to deny specific network IPs HTTP/HTTPS access during a given time period.

This discussion is closed to new replies.