General discussion

Locked

stop users access internet thru proxy

By atharaaa ·
Dear all,

I have a problem regarding ISA 2000. In my W2k network I have ISA as the proxy and I had applied an access policy which will allow only those users who had been given permission on ISA using their W2K login/account's password. The problem is that users are sharing their passwords with other people who are not given internet access formally. This is eating up my bandwith and as a result the accesss of internet is not fast.

Kindly suggest me a way to block more than one instanceof accessing internet using single uesrname & password. By this only one person will be able to access internet with the authorised username and password. Hope you got my problem.

Your help is highly appreciable and as an act of kindness I will be thankful to you for your help.


Regards,

Abdul Aziz

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

stop users access internet thru proxy

by R. A. Caluste In reply to stop users access interne ...

Well, we have the same problem. I was able to fix that by assigning a fixed (static) ip address to all my internet users. Allow access to the internet NOT by username and password but by client address sets. Create a client address set of ip addresses of workstations used by employees with internet access. Then use this client address set to allow internet access. This way, only the workstation has net access and not the user. Even if they save their username and password to another pc, it still wont work.

Hope this helps.

Allan

Collapse -

stop users access internet thru proxy

by R. A. Caluste In reply to stop users access interne ...

Btw, an employee may have several instances of his account on the ISA server for each service the employee is using (web proxy, firewall client)

Collapse -

stop users access internet thru proxy

by atharaaa In reply to stop users access interne ...

Dear all,

Got your solution and this seems to be a solution to what I had asked. But it still has the scope for user to access internet thru ISA based on Host Static IP criteria you suggested. To my understanding, if any user log's in to the PC which is assigned Static IP & authorised on the proxy can access internet as the criteria now is the IP address of the PC not the username and password used in the Domain.
Bye the way, I have around 200 users to whom I have granted internet access onthe ISA(PROXY) and its not going to be feasable to assign Static IP's to the PC as we have Subnet in our LAN and there are user who are connected to our Network thru leased line and their PC's are not member of our domain.

Hope you got my problem.

Kindly Suggest.

Abdul Aziz

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums