This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Part time access

I am currently assessing this firewall as a trial user and need to set up various restrictions for users of the network. Is there any way of setting HTTP/HTTPS access/restrictions at certain times of the day for users? I am using a HTTP proxy with user authentication. Version 5.019.

I haven't been able to find anything that tells me I can't or how.

Thanks

This thread was automatically locked due to age.

0 cyclops over 21 years ago

the firewall itself has no timer capabilities but you could manage it with RADIUS user authentication.

Greetings
cyclops
Cancel
Vote Up 0 Vote Down

Cancel
0 Brent_Gay over 21 years ago

Don't know if this would be an option or not...but if you are running Cisco routers with a fairly recent IOS you can implement time-based ACL's. Check out Cisco's website on time-based ACL's.
Cancel
Vote Up 0 Vote Down

Cancel
0 bobbi over 21 years ago in reply to Brent_Gay

Thanks for the advice guys, no Cisco routers here though unfortunately.
Radius looks a bit laborious for this job, is it the only valid option for this problem?
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 21 years ago in reply to bobbi

Probably less laborius than researching what needs to be done to add cron entries and modify the startup scripts to start and stop the http proxy -unless you're good at Linux...
Cancel
Vote Up 0 Vote Down

Cancel
0 Dirk_Wagner over 21 years ago in reply to bobbi

On a ASL V4 box I edited for a customer the squid.conf file and defined additional time-based "access control lists (acl)". Worked fine, should also work in V5. Look at /var/storage/chroot-squid/etc/squid.conf and to the Squid configuration manual . Hope that helps.

Dirk
Cancel
Vote Up 0 Vote Down

Cancel
0 cyclops over 21 years ago in reply to Dirk_Wagner

not really a good advice. On one hand the file to modify is squid.conf-default on the other hand Astaro recently changed its support policy. In a commercial environment I would be careful since modifyiing the firewall under the hood may void the product warranty. I don't know if Astaro enforces this policy. In doubt I would leave the product as it is.

Greetings
cyclops
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 21 years ago

I am assuming a windows network. If you have a windows domain jsut setup the user accounts on the domain controller in group/user policies that x user is only allowed to be on at x times and all other times the user is not allowed to be on. If you have a peer-to-peer network. Make the user a regular user and set those restrictions directly on the users box.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel