Connection problems using more than one policy

[gkarakas]

Hi all,

I try to accomplish the following: during work hours in weekdays (8:00-17:00 monday-friday) everyone can use the web (http) except a few sites. These sites are added to the ban list. Otherwise there should be no restrictions on web usage.

So I have created two policy:
- one is restricted only by time (weekends and weekdays 0:00 - 8:00 and 17:00-23:59,
- the other is restricted by time (weekdays 8:00-17:00), location (our LAN) and ban list
System policies are ignored.

This works for weekdays, but on weekends we experience connection problems: the browsing stops, the data transfer randomly breaks during browsing.

This has been a problem since 4.x. What should be the correct setup for this?

Gyula

[MattP]

Hi,

I set up the policies basically the same way that I think you have them and it all seemed to work really well for me. Here's what I did:

set assumed users

created a policy for everyone in WWW proxy that allowed access from 08:00:00 to 16:59:59
set no excluded times
under advanced tab set criterion, set this criterion is not met if server name contains msn
under advanced tab set criterion, set this criterion is not met if server name contains yahoo
set default system rights to are ignored

created a policy for everyone in WWW proxy service that allowed access from 00:00:00 to 07:59:59 and from 17:00:00 to 23:59:59
excluded access from 08:00:00 to 16:59:59
set default system rights to are ignored

This policy allowed me to browse all websites including msn and yahoo sites before 08:00 and after 17:00 but not during those hours. During the hours of 08:00 and 17:00 I could browse any site except the above.

I hope this helps,

[gkarakas]

thanks for the tip, I made the changes and will see if it works.

Do you suggest I should use the Advanced/request settings instead of the Ban list? I have dozens of entries in that.

Also do I need to excluse the time used by the other policy? I thought that simply giving not overlapping times for the "inluded times" is enough.

Gyula