Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 5001 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configure Quotas for less restricted surfing

SicorS.p.A.

Hi all,

I'm in trouble with Quotas for web surfing (in detail Time Quota).

I have 3 Users Groups, with AD Authentication (working bad...). Let's call them StrictUsers, Users and SuperUsers.

What I want to do is to let StrictUsers and Users to surf for 30 minutes at day like a SuperUser (with SU web filtering), and for the rest of time to surf like their group.

I need also that, if a user surfs within his group boundaries (like StrictUser go to a site where they can go) doesn't burn his quota, but the quota will be burnt only if he goes outside its group boundaries (like going to facebook).

Is that possibile?

For now I have seen that, if I exceed my quota, I can't log on anymore on firewall, so I will be an unhautenticated client.... that is not what I want.

Many thanks

Manuel



This thread was automatically locked due to age.
Parents
  • 0

    Manuel,

    can you share your policy rules?

    Thanks

  • 0 in reply to lferrara

    Right now I have found in the KB how to partially solve the problem, but for my use case is totally useless..

    Rule 1 : Authenticated USER -> Group Strict (that has the quota bundle)

                  From LAN to WAN

                  Web Filter -> Free surfing

    Rule 2: Any user

                  From LAN to WAN 

                  Web Filter -> Strict

    This is the only way to have one group that can surf for 30 minutes without webfilter and after that with Strict web filter. But this uses is totally useless for a company, is more like Hotel or Captive portal uses....

    What I want to do is that a user can surf within their limited profile for an unlimited ammount of time, and only for 30 minutes they can go to unproductive sites, like facebook, but in any moment of the day and use this bundle only if they go outside Strict webfilter boundaries.
    This must be done for 2 different user goup, that during day have different web filter, but for 30 minutes they could surf with the same unproductive web filter.

    From what I have seen, if th bundle finish, one user can't log anymore and with AD Authentication will be see as unhautenticated user. This has 2 limits:

    1- All the users of both groups, once finished the bundle, will be filtered in the same mode, like the Unhautenticated users rule

    2- The 30 minutes bundle starts immediately, and not when a user go to an unproductive site, and that is totally useless for me

    So, If I have understood correctly, this Quotas can't be used as I need. Am I doing something wrong?

Reply
  • 0 in reply to lferrara

    Right now I have found in the KB how to partially solve the problem, but for my use case is totally useless..

    Rule 1 : Authenticated USER -> Group Strict (that has the quota bundle)

                  From LAN to WAN

                  Web Filter -> Free surfing

    Rule 2: Any user

                  From LAN to WAN 

                  Web Filter -> Strict

    This is the only way to have one group that can surf for 30 minutes without webfilter and after that with Strict web filter. But this uses is totally useless for a company, is more like Hotel or Captive portal uses....

    What I want to do is that a user can surf within their limited profile for an unlimited ammount of time, and only for 30 minutes they can go to unproductive sites, like facebook, but in any moment of the day and use this bundle only if they go outside Strict webfilter boundaries.
    This must be done for 2 different user goup, that during day have different web filter, but for 30 minutes they could surf with the same unproductive web filter.

    From what I have seen, if th bundle finish, one user can't log anymore and with AD Authentication will be see as unhautenticated user. This has 2 limits:

    1- All the users of both groups, once finished the bundle, will be filtered in the same mode, like the Unhautenticated users rule

    2- The 30 minutes bundle starts immediately, and not when a user go to an unproductive site, and that is totally useless for me

    So, If I have understood correctly, this Quotas can't be used as I need. Am I doing something wrong?

Children
No Data