SpuffMonkey Posted December 3, 2009 Posted December 3, 2009 Hi Just wondered if any SW gurus (hi Tom) had an answer to this - we've started used the "Temporary Ban User" feature - which is nice....but...is there an easy way to simulate this feature to force a user to a "Whitelist" so they can get to our internally hosted VLE, but not to any external sites? Just would be really useful to be able to say a user is banned, except for Moodle, SAM Learning or whatever. Look forward to any suggestions.
Willott Posted December 3, 2009 Posted December 3, 2009 Just a thought, but if it's internally hosted, couldn't you add it to the proxy bypass list? Cheers
plexer Posted December 3, 2009 Posted December 3, 2009 If it's an internal site add it to the bypass proxy for local addresses list? Ben
rob_f Posted December 3, 2009 Posted December 3, 2009 Guardian > Authentication > Settings, set the "Banned Users" group to "Yes (filtered)" rather than "no". They'll then be able to browse the web. Now create a policy that says "Banned Users - Everything - Always - Block" then a new custom filter with a custom category for the list of sites they need to get to, then apply it to them with an "Allow". ...if aforementioned solutions don't work out for you that is 3
plexer Posted December 3, 2009 Posted December 3, 2009 So that means are banned users will only be able to access whitelisted sites in our new custom category? Ben
rob_f Posted December 3, 2009 Posted December 3, 2009 Sure does ! Them being set as "no" on that authentication page is the only bit that actually makes them banned as such, you can just fiddle it round so that they get a specific policy. Really temporary bans is just temporarily making a user a member of a specific group.
SpuffMonkey Posted December 4, 2009 Author Posted December 4, 2009 Cheers Rob - I'll give that a go. Strangely though - we noticed yesterday (by accident) that the Barred users COULD access the BBC site - but no others??? I'll have a go at configuring it up the way you suggest and give things a test.
SpuffMonkey Posted December 4, 2009 Author Posted December 4, 2009 Thats working lovely now - and sorted the BBC thing too - it was entered as a non authenticated site (because of previous problems with iPlayer I think) - so deleted it there as the Flash version seemed to work fine now - so many thanks for all the help - and this "naughty pupil" whitelist is a bonus.
GrumbleDook Posted December 4, 2009 Posted December 4, 2009 Guardian > Authentication > Settings, set the "Banned Users" group to "Yes (filtered)" rather than "no". They'll then be able to browse the web. Now create a policy that says "Banned Users - Everything - Always - Block" then a new custom filter with a custom category for the list of sites they need to get to, then apply it to them with an "Allow". ...if aforementioned solutions don't work out for you that is Pretty sure I recognise that process from the good old days of I-Gear when it was produced by URLabs ... I knew there was a reason I liked Smoothwall! Bringing back all the stuff Symantec destroyed!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now