Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 5516 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internet Access

BurimTahiraj

Hello,

Currently all Domain Uses access internet using the UTM IP as proxy on their browsers. There are Polices that apply to to all the Domain Uses.

There are times when outside people come to our offices and they need internet access, once they plug their laptop to our network they will get DHCP assigning our UTM ip as their gateway but they will not be able to authenticate, no prompt for username/password. Logs show that the Base Policy is blocking them. 

How do I grant them internet access without having them type UTM IP as proxy on their browser, just using the UTM IP as gateway. 

 



This thread was automatically locked due to age.
Parents
  • 0

    The best option would be if you created another (guest) interface for this. You could then ie. have a firewall rule to allow this network Webbrowsing service to Internet IPv4 and IPv6.

    You could also adjust the base policy to allow just what you want to allow to those guests.

    Additionally you could add a PAC configuration in Web protection -> Filtering Options -> Misc -> Proxy Auto Configuration so guests will automatically be offered proxy settings (their browser needs to be configured for this, but this usually is the default setting (at least in IE)).

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Reply
  • 0

    The best option would be if you created another (guest) interface for this. You could then ie. have a firewall rule to allow this network Webbrowsing service to Internet IPv4 and IPv6.

    You could also adjust the base policy to allow just what you want to allow to those guests.

    Additionally you could add a PAC configuration in Web protection -> Filtering Options -> Misc -> Proxy Auto Configuration so guests will automatically be offered proxy settings (their browser needs to be configured for this, but this usually is the default setting (at least in IE)).

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Children
No Data