Kerio Tech KERIO WINROUTE FIREWALL 6, Administrator'S Manual

Page: 198 / 368

Chapter 15 User Accounts and Groups
198
is displayed. The unlock feature must also be enabled in the corresponding URL rule (for
details, refer to chapter 12.2 ).
User can dial RAS connection
If the Internet connection uses dial-up lines, users with this right will be allowed to dial
and hang up these lines in the Web interface (see chapter 11 ).
User can connect using VPN
The user is allowed to connect through WinRoute’s VPN server (using Kerio VPN Client ).
For detailed information, see chapter 23 .
User can use Clientless SSL-VPN
The user will be allowed to access shared files and folders in the local network via the
Clientless SSL-VPN web interface.
The Clientless SSL-VPN interface and the corresponding user right in WinRoute is available
for Windows only. For details, see chapter 24 .
User is allowed to use P2P networks
Traffic of this user will not be blocked if P2P ( Peer-to-Peer ) networks are detected. For
details, see chapter 17.1 .
User is allowed to view statistics
This user will be allowed to view firewall statistics in the web interface (see chapter 11 ).
Hint
Access rights can also be defined by a user account template.
Step 4 — data transmission quota
Daily and monthly limit for volume of data transferred by a user, as well as actions to be taken
when the quota is exceeded, can be set in this section.
Transfer quota
Setting of daily, weekly and monthly limit of volume of transferred data for the user.
Use the Direction combo box to select which transfer direction will be controlled ( down-
load — incoming data, upload — outgoing data, all traffic — both incoming and outgoing
data).
The limit can be set in the Quota entry using megabytes or gigabytes.
Quota exceed action
Set actions which will be taken whenever a quota is exceeded:
•
Block any further traffic — the user will be allowed to continue using the opened
connections, however, will not be allowed to establish new connections (i.e. to
connect to another server, download a file through FTP, etc.)
• Don’t block further traffic (Only limit bandwidth...) — Internet connection speed
(so called bandwidth) will be limited for the user. Traffic will not be blocked but
the user will notice that the Internet connection is slower than usual (this should