XG Rules Order

Please post a screen shot of your rules?

As rfcat_vk wrote,

a firewall rules screenshot would help.

Howvere the deny rule should be placed on top. Remember that the first matched rule will we used and no other rules will be checked.

So if you want to really deny internet to those 10 devices, place the deny rule on top and as second one put the rules where users are able to surf on internet only during restricted time.

Regards

check the screenshot above,i took all firewall rules.suggest for any correction.

Hi,

I am trying to understand some of your rules. You have two rules for mail that do the same thing, you only need one or refine one.

Your camp rules are not consistent, one has DNS and the other doesn't.

Your allow out rule doesn't seem to have time period set.

I can't remember the rule settings.

Edited the answer, because part was wrong.

Do you have the NAT in place, try adding the DNS. What other functions within the policy do you have enabled?

there is no NAT configured.i allowed some websites on default rule.

Did you review the logic of your rules starting from the top working to the bottom.

Work through each rule identifying what is allowed and when and what is stopped by the same rule.

Draw yourself a table with each rule setting.

Did you review the logic of your rules starting from the top working to the bottom.

Work through each rule identifying what is allowed and when and what is stopped by the same rule.

Draw yourself a table with each rule setting.

There is no need to add a drop all rule because the firewall drops all traffic that does not meet any rule.

checked all rules and changed some rules order now seems working as expect. i have another issue, is there anyway to logout the xg console when i login to different pc or browser.

Sorry, I really don't understand your question? You logout using the logout item (top righthand corner) or you close the window.

Feroz,

you should post one question per each thread. If the XG Rules orders is answered, please open another thread.

Logout is only managed by XG which destroys the cooky.

You can try to configure "Simultaneous Logins" on the user creation.

Open another thread.

Thanks