Only allow email access

[clinthammer]

how do I only allow a user to have email (via outlook) access and no Internet browsing access?

uses connect via transparent proxy to wingate to the internet.

e.g. John should only be able to send/receive work emails from his Outlook account. He cannot use the INTERNET TO BROWSE such as going to hotmail, yahoo, putfile.com etc.

Thanks,
CD

[Pascal]

Are your users currently authenticating with WinGate? If they are then the easiest option would be to use policies. Few guidelines on setting them up though:

1. Policies are permissive. So if one policy grants a right to a user that right will be granted, even if a subsequent or preceding policy denied that right.

2. When using Advanced Policies, Filters are OR statements (E.g. Filter1 OR Filter2 must be true for the right to be granted) Criterion are AND statements (E.g. In Filter1 Criterion1 AND Criterion2 must be true for the right to be granted)

What you would want to do is to grant access to EVERYONE through the System Policies. Add a Advanced Criterion that says "This right is NOT granted if USERNAME is 'John' ". This will deny access to JOHN for all services that do not have custom rights (By default all of them) and will allow all other authenticated users to access the internet.

Then, in the service you want John to have access grant EVERYONE rights and simply set the Default (System) Policies to be IGNORED. That way, everybody has the right to use Email and the restriction you put in System Policies will not take effect.

One tip in this is to setup specific access rights for your administrative group/user to the Remote Control Service and to ignore the default policies within that service. That way, if you make any policies changes you cannot accidentally lock yourself out of GateKeeper. (One other way is to export the registry through Advanced Options BEFORE making any of these changes)

Hope that helps!