Block internet access for AD groups authenticated users in XG firewall

Hi Fred atallas 

You may two options 

1. Create a Group for users who does not need internet access by setting Application and Web Policy set to Deny All on Group policy.

2. Create a Rule and select the users/group and set action of the rule to 'Deny'.

Kindly note, you may need to check if the traffic is not going through any other rule and position the rule on top to be sure. 

Hi Fred atallas 

You may two options 

1. Create a Group for users who does not need internet access by setting Application and Web Policy set to Deny All on Group policy.

2. Create a Rule and select the users/group and set action of the rule to 'Deny'.

Kindly note, you may need to check if the traffic is not going through any other rule and position the rule on top to be sure. 

Hello Aditya ,

i tried both ways 1 and 2 but not seem to be applied since the user can still surf to the intranet .

Fred atallas said:

Hello Aditya ,

 

i tried both ways 1 and 2 but not seem to be applied since the user can still surf to the intranet .

 

Fred,

you cannot restrict access to Intranet unless the XG is used to manage all intra-vlan networks or is deployed in bridge mode.

To deny access to intranet, you need to play with your Web Server Authentication mechanisms.

Regards

Hi Fred,

You have mentioned the internet as per the original post, as for Intranet you may need to check if the traffic is traversing through the XG or not. If not then your web server should manage the connections and if so you may manage through the 2 options presented.