Limit access to specific user

[Algeron]

I want to set up a rule that will only allow a specific AD username access to a group of specific websites. I have created a rule for this and it is at the top of the list, but the user can still get to other sites. Do I need to add something to the "What" tab that blocks everything else? Or since all other rules are set for Everyone, do I need to modify all others to not include this username?

[adrien]

this group allowed access to specific websites. iS this the only group allowed access to anything?

Or are there other groups allowed access to things?

If it's the only group allowed access to anything, you'd need to set the default rule to deny.

You should be able to see how people are getting through the rules by looking at the rule hit counts, or if you have the right license, you can enable logging of matching rule in the WWW proxy usage logs.

[Algeron]

This one user/group will be the only one restricted to the 2 sites. Everyone else is is hitting the standard ban list.

Basically, we are adding a few extra computers around the company that regular employees will be able to use to view online pay stubs. We do not want them going anywhere else but the pay stub site and the one site for the company. All other employees (managers, etc) will just hit the banned site list like normal, but the can go almost anywhere.

[adrien]

Hi

ok, so you need several rules

1. Allow restricted computers to restricted sites
2. Deny restricted computers
3. Allow everyone wherever....

Adrien

[Algeron]

Since you are mentioning computers, would it be better to use the computer names then using a generic single username in the AD list?