Kerio Tech Firewall6 Manuel d'utilisateur télécharger pdf (Page 111)

100

101

6.4 Basic Traﬃc Rule Types

111

Alternatively you can deﬁne the rule to allow only authenticated users to access

speciﬁc services. Any user that has a user account in WinRoute will be allowed to

access the Internet after authenticating to the ﬁrewall. Firewall administrators can

easily monitor which services and which pages are opened by each user (it is not

possible to connect anonymously).

Figure 6.29 Only authenticated users are allowed to connect to the Internet

For detailed description on user authentication, refer to chapter 8.1.

Notes:

1. The rules mentioned above can be combined in various ways (i.e. a user group can

be allowed to access certain Internet services only).

2. Usage of user accounts and groups in traﬃc policy follows speciﬁc rules. For de-

tailed description on this topic, refer to chapter 23.5.

Exclusions

You may need to allow access to the Internet only for a certain user/address group,

whereas all other users should not be allowed to access this service.

This will be better understood through the following example (how to allow a user group

to use the Telnet service for access to servers in the Internet). Use the two following rules

to meet these requirements:

• First rule will deny selected users (or a group of users/IP addresses, etc.) to access

the Internet.

• Second rule will deny the other users to access this service.

Figure 6.30 Exception — Telnet is available only for selected user group(s)

1 2 ... 106 107 108 109 110 111 112 113 114 115 116 ... 397 398

Commentaires sur ces manuels

Pas de commentaire

Kerio Tech Firewall6 Manuel d'utilisateur Page 111

Commentaires sur ces manuels