Restrictons - Assumed Users - Question

[FrNbgMu]

Hello,

i am not sure if it is working like designed or not...

I have a user assumed by IP. For this user i create a group in the WWW Proxy Service. In this group i add a restriction for a site.
I am using Java login and the group is set to user may be assumed. The Proxy Service is set to ignore the default policies.

If the user (assumed) try now to access the blocked site he got a message from the wingate that the access was denied.

So long ok... but if i create a second group (with other users) in the Proxy Service, with the same authentication settings (may be assumed) - and a assumed user try to access a restricted site the java login window is coming up. (In the Wingate i can see that the user is assumed and i can also see that he load the java login window) If the user then do a logon on the Java Login, he got also the access denied. (When the user is sign in via the java everthing is working normal for this user)

So i am a little bit confused now, because i did not know is this correct or not because i think if a user is assumed and my groups are set to allow assumed users the user will never see a login screen. This is how it is working if i have only one group but if i add a second group to the service the user get the login screen when he try to access a restricted site?? (He can browse without a login because he is assumed still he try to access a blocked site)

Thank you and best regards

Frank

[logan]

This is normal when there are multiple policies in the proxy. If an assumed user is denied access to a website, but a policy exists that would grant access to the website for a different user, WinGate will give the user the chance to auth with a different account to gain access to the website. If the user authenticates with an account that is granted access, they will have access. If the user authenticates with an account that doesn't have access, the user will be given an access denied error after authenticating.

[FrNbgMu]

Hello Logan,

thank you for this explanation.

Best regards

Frank