Chapter 7
Traffic Policy
96
Figure 7.34
This traffic rule allows only selected users to connect to the Internet
Such a rule enables the specified users to connect to the Internet (if authenticated). However,
these users must open the
WinRoute
interface’s login page manually and authenticate (for
details, see chapter
However, with such a rule defined, all methods of automatic authentication will be ineffective
(i.e. redirecting to the login page, NTLM authentication as well as automatic authentication
from defined hosts). The reason is that the automatic authentication (or redirection to the
login page) is not invoked unless connection to the Internet is being established (for license
counting reasons — see chapter
). However, this NAT rule blocks any connection unless
the user is authenticated.
Enabling automatic authentication
The automatic user authentication issue can be solved easily as follows:
•
Add a rule allowing an unlimited access to the
HTTP
service before the NAT rule.
Figure 7.35
These traffic rules enable automatic redirection to the login page
•
In URL rules (see chapter
), allow specific users to access any Web site and deny
any access to other users.
Figure 7.36
These URL rules enable specified users to access any Web site
Summary of Contents for Firewall6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies...
Page 129: ...8 5 HTTP cache 129...
Page 404: ...404...
