Re: Internet Access
- From: "Phillip Windell" <philwindell@xxxxxxxxxxx>
- Date: Wed, 11 Apr 2007 16:03:46 -0500
Use Domain Name Sets and not URL Sets
They should look like this. Do not put the "http://" in them
*.weather.com
*.microsoft.com
*.othergoodsite.com
You have to include all the Domains that a particular site might contain with in
it,...or at least the ones that matter to the functionality of the site.
You should also specify a redirect page in the rule. It can be just a simple
blank white page if you like. But it will allow that page to get inserted into
the banner ads and similar suff that link to forbidden sites. So if you see a
plain white banner ad,..it probably was suppsed to have a graphic from some
forbidden site. What I used to do was have a plain white page with just
"Restricted Site" written in the upper left corner. Then the banner ads would
load up with a plain white banner with "Restricted Site" written in where the
graphic would have normally been, so it was clear to the user and everyone what
was going on.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html
Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc
Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------
"Kevin" <coxtrans@xxxxxxxxxxxx(donotspam)> wrote in message
news:A9E0AFD9-2CD7-42DD-B945-2526B6D396AF@xxxxxxxxxxxxxxxx
I am trying to restrict internet access to some clients to most external
internet sites. I have created a windows group and put a user in it. I
created a deny rule and added exceptions the rule to allow some sites. The
user is able to access the site but not the entire site. For example if use
weather.com as an exception to the rule the user is granted access to the
site but begins to receive runtime errors. I believe the errors are caused
by the fact that the sites listed on the home page sites or advertisements
that are not accessible by to the user because of the rule. I have tried to
use wild card combinations like weather.com* http://www.weather.com* etc. but
this does not solve the problem.
--
Keivn
.
- Prev by Date: Re: ISA 2006 - Define outgoing IP
- Next by Date: Re: vpn + citrix client + isa2004
- Previous by thread: Re: Help!!
- Next by thread: Re: vpn + citrix client + isa2004
- Index(es):
Relevant Pages
|
Loading