help with wingate 6.x

[zalst]

1. create groupe "faktor"
2. create groupe "sklad"
3. create groupe "restrict"
4. create users: user1 (faktor groupe), user2 (sklad groupe)
5. "sklad" and "faktor" groupes are belongs to "restrict" groupe
restrict
/ \
factor sklad

First question: can I use except two ban lists (for each groupe sklad and faktor) - one ban list instead (restrict groupe ban list)?

6. in system polices I add faktor groupe with (users must be aut.) and ban list (server name includes "vk.com")
7. in www proxy server: in users roule I add faktor groupe with ban list "vk.com"

but users in this gruope still have acсess to vk.com site. I tried to ignore system rules, but the same.

[jasona]

easiest way to do this would be a single policy on the WWW Proxy for the restrict group (User must be authed) (Ban list activated) and System policies are ignored. You can leave system policies as everyone unrestricted.

In order for the WWW Proxy policies to be applied you need to make sure that the users are using the WWW Proxy, either by configuring their browsers to proxy through WinGate or by intercepting connections.

http://support.qbik.com/index.php?_m=kn ... ticleid=57

[zalst]

---

[zalst]

I found serious problem with rules as for me:

www proxy:
1. I ignoring system rules
2. I add my restricted groupe(ban list enabled) and everything ok!
3. I add another groupe with another users(for example administrators or new created groupe) - ban list for this groupe disabled

now I have two groupes in WWW proxy: restricted (ban list on) and other groupe(ban list off): users from first groupe(restricted) begins ignoring ban list! it doesn't work!

4. I delete second groupe from policies - again OK! ban list works

------------------- wingate log --------------------
1.01 WINGATE CONFIGURATION REPORT
1.07 WinGate 6.6.4 (Build 1338)
1.08 Operating System: Windows 2000 (NT 5.1)
1.09 Language:
1.10 User database: WinGate
1.11 Num. users: 6


6.05 System Policies
6.06 ---------------------------------------------
6.07 Default System Access Rights:
6.08 Everyone - Unrestricted rights
6.09 Default Start/Stop Rights:
6.10 Administrators - Unrestricted rights
6.11 Default Edit Rights:
6.12 Administrators - Unrestricted rights

6.32 WWW Proxy server (WWW Proxy server)
6.33 ---------------------------------------------
6.34 Session Timeout: 180
6.35 Port: 3128
6.36 Startup: Automatic start/stop
6.37 Access Rights: Defaults: are ignored
6.38 Restricted - Restricted by security level; location; ban list
6.39 Administrators - Restricted by security level
6.40 Start/Stop Rights: Defaults: may be used instead
6.41 Edit Rights: Defaults: may be used instead

[jasona]

It sounds like the newer policy overriding the older one. Is the user you are testing with a member of both groups?

[zalst]

No, user is not member of both groups! the same problem after reinstalling and reconfiguring wingate.

--------- and second less important question:
If the new user "must change password next logon". I try to login this user with a blank pass - it's ok but pass still blank. If I try login with a new pass it access denied(failed). How user have to change it?

[jasona]

It still seems like some sort of configuration problem so I think it would be a good idea for you to create a support ticket.
http://support.qbik.com/index.php?_m=tickets&_a=submit

If you can attach the following files so we can take a look at it here.


1. WinGate Registry
GateKeeper --> Options menu --> Advanced --> Save Registry

2. WinGate Config Report
GateKeeper --> Options menu --> Advanced --> Save Config Report



-----------------
If the new user "must change password next logon". I try to login this user with a blank pass - it's ok but pass still blank. If I try login with a new pass it access denied(failed). How user have to change it?
------------------

This only works if the users are using GateKeeper itself to log in, it does not work with the java applet etc. I would recommend either allocating passwords or getting the clients to log on using GateKeeper the first time so they can choose a password.

[zalst]

Created ticket JET-722209(with config and reg files)
thank You