How to ban a computer name

[ucl]

I must ban some server via computer name, how can I do this?

[adrien]

Hi

Normally there's no reliable method to obtain the computer name from a remote computer. However if that computer uses WinGate's DHCP server to obtain configuration settings, then WinGate learns its computer name at that time, and then you can use it in policy.

It might be easier however to use a credential rule to assume that the computer is a particular user, then ban that user account in web access control rules, otherwise you would need to use flow-chart policy to test the computer name to ban.

Regards

Adrien

[ucl]

We don't use Wingate DHCP and a particular user is not possible.
I have found no solution in the flow-chart policy, can you explain me more?

[adrien]

Hi

when a computer connects to WinGate with TCP/IP, WinGate only learns its IP address.

To resolve the computer name from the IP address there is no reliable method.

Reverse DNS can sometimes work if you're on an AD, and the client registered its IP in the AD DNS server including PTR records
Using NBTSTAT is not reliable, often it's blocked
I don't know of any AD query that will find a computer object from its IP.

So, unless you're using WinGate as the LAN DHCP server, or you're using the WinGate Internet Client, WinGate doesn't learn the computer name, and therefore cannot block based on computername.

Does this server obtain an IP by DHCP? I would suggest making the DHCP give it a reservation, and then block the server by IP.