Deny Internet Access to Several Pc's

[ksweezo]

I have a customer that wants several of there pc's to have no Internet access. Yet still have the pc updates come thru. Also the anti-virus is being provided by the firewall. Is there a way to set up your proxy to deny these pc's only from accessing the Internet while allowing the update traffic.

[alejandroc]

Indeed, you can.
First you will have to enforce a policy of eathir assumed or authenticated user. When he users are properly identified you can setup your policy to specify which services or sites these users have rights for. You will have to know which addresses the antivirus and system updates connect to so you can setup your policy properly.

Hope this helps. Let us know if you need further help.

Alejandro Calderon
Guatemala