This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow Target Service for specific proxy users/groups only in UTM 9.3

So I need to allow a target service for specific proxy users / groups in UTM 9.3.

I found how to globally allow a target service here 'Target Service Not Allowed' error in Astaro Security Gateway or here https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46265

Thing is, I don't want to allow that target service for every user but a specific subset of users. How would I do that?

Thanks
Tom

This thread was automatically locked due to age.

0 Scott_Klassen over 10 years ago

The Allowed target services is only a global setting. Is this some website with a custom port or something else?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

Hi, Tom, and welcome to the User BB!

I haven't tried it, but what happens if you configure a block and an Exception for:
^https?://domain\.com:5553/

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 lightxx over 10 years ago in reply to Scott_Klassen

yes. it's an admin web page of some service, hence the requirement.

The Allowed target services is only a global setting. Is this some website with a custom port or something else?
Cancel
Vote Up 0 Vote Down

Cancel
0 lightxx over 10 years ago in reply to BAlfson
Thanks for your feedback!

I'll try this but it seems quite cumbersome to me to to this in an 'inverted' fashion. For every port I wish to allow using an exception I would need to add a block as well.

The service definitions shouldn't be global but on a finer granulated base.

Is there some website for feature requests?

Btw, this is the regex I ended up with for the blocking:

^https?://[A-Za-z0-9.-]*:6080/

Hi, Tom, and welcome to the User BB!

I haven't tried it, but what happens if you configure a block and an Exception for:
^https?://domain\.com:5553/

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Feature Request Site: UTM (Formerly ASG) Feature Requests: Hot (1983 ideas)
Cancel
Vote Up 0 Vote Down

Cancel
0 lightxx over 10 years ago in reply to Scott_Klassen

Thanks!

Seems like somebody already came up with the same problem:

Web Protection: Per-Profile "Target Services"

Feature Request Site: UTM (Formerly ASG) Feature Requests: Hot (1983 ideas)
Cancel
Vote Up 0 Vote Down

Cancel