This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IM Exception for AD Groups

Hello,

is it possible to put here "AD Groups": sync with the backend rather than "HOSTS/NETWORKS"?

I ended up with this help context;
For These Client Hosts: Select the source hosts/networks to be exempt from the actions by the Astaro Flow Classifier of this exception rule.

Thanks

This thread was automatically locked due to age.

0 Undel over 14 years ago

I'm also stuck with this one.
Any help would be greatly appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

It is possible to add a User Group Network object to the source networks list. Whether or not this will actually work is another matter though.

Update: I just ran a quick test and no it doesn't appear to work for User Network Objects or User Group Network Objects as the blocking is done solely based on IP Address.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Undel over 14 years ago in reply to Scott_Klassen

Yes, that's right. I've tested it already and the problem is that all my User Group networks and User networks are shown "unresolved". And I don't know what to do with them to become resolved.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

IPs are only associated with the Network User objects when the user logs in though VPN (SSL, PPTP, L2TP, etc).

There's currently a feature request to expand this feature to allow other authentication mechanisms to map user to IP. Add some points to the request to increase the chance that it will be added to Astaro. Authentication: User IP Mapping

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

The User Authentication Client is included in V8.2 which is now in public beta.

Currently, the work-around for this is to do 'Static MAC/IP Mappings' in DHCP, and create actual host definitions.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

FYI, in it's current implementation, the User Authentication Client still won't link IP Addresses and User Network Objects.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

Thanks, Scott. I haven't tried it - I just remembered that this was one of the features that was announced when the beta went public.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel