Access rights to NAT in Wingate 7

[ffvvvv2]

Hi!

Thank You for wonderful product -- Wingate!

I've just install on our server Wingate 7 Free Edition.
But I don't understand, how I may restrict access to NAT!
Practically all users may use direct access to Internet,
but we need to define 3 users, assumed by ip-address.
All other users must be haven't any access to NAT.
Please advice me, how I may to solve this problem.
Thank You

With best regards,
Vyacheslav

Sorry for my very BAD English

[adrien]

Hi

for NAT access control, you need to use flow-chart policy. There should be a sample policy you can use to see how it works. Check the policy for the "NAT Controller: ClientConnect" event

Regards

Adrien

[ffvvvv2]

Thanks!!!

But flow-chart policy doesn't work.
I make 3 users.
With help of credential rules I was assumed this users by ip.
All of 3 users -- members of group "NAT"

Flow-chart policy with following parameters:
Event: WingateNAT:ClientConnector
User / group check: NAT (Wingate\Users)
From "User / group check" Yes ---> Allow
From "User / group check" No ---> Disconnect

But it seems not working: "Activity" displays many users
(I see this as "Unknown"). These "Unknown" users may work
through NAT without problem.

How may I to solve problem with "Unknown" users?

With best regards,
Vyacheslav

[adrien]

Hi

If you refresh the statistics on your policy, do you see hits on it?

Did you connect the event to it? If not then the policy is not in force.

Regards

Adrien

[ffvvvv2]

Many thanks!
After event's creation all working fine!

Another sorry for my leaning English :-)

[ffvvvv2]

Please, help me with another question.
I seek the way to restrict connection in Wingate Firewall
from ip-addresses (IP-filter).
In wingate firewall i was open TCP-port (for example, 45000).
How I make restriction on IP, from which may be connections?
For example, I want to restrict connections from 2-3 IP to
my internet ip-address (port 45000).
In Windows Brandmauer I was easy make this IP-filter.
Is it possible in Wingate Firewall?
Thank You for answers!

[adrien]

Hi

You can do policy control for NAT in flow-chart policy. There is an event relating to NAT connections which allows you to disconnect connections if they aren't permitted.

there should be a sample policy you can look at for the NAT controller: ClientConnect event.

Regards

Adrien de Croy

[ffvvvv2]

Thanks!
May be only one policy for event "NAT controller: ClientConnect"?
At this moment we using Wingate 7.0 free license.

[adrien]

Hi

yes you can only have 1 policy at any time connected to an event. You can chain policies together though by using a call policy item (which connects to an entry point item in the called policy).

Adrien