Matrix NAVAN CNX200, System Manual

Page: 284 / 1388

274 Matrix NAVAN CNX200 System Manual
• Select the Access Permission for the users. You can select Allowed or Denied .
Access Denied
If you select Denied , you can deny access to users on the basis of Domains, Keywords, Destination IP
Addresses and Port.
• To deny access to certain domains on the basis of Keywords, click Domain blocking on Keyword
to expand and configure the keywords you wish to block in the list. If the LAN hosts/users try to
browse any of the listed domains, the system blocks their access.
For example, if you want LAN users must not be allowed access to Facebook, you may configure a
string like
facebook in the list. Doing so, all domains having the “facebook” string (like
facebook.com, facebook.net, facebook.in etc) will be blocked. If you want to block only
facebook.com , you must configure facebook.com in the list.
If you configure mail.yahoo in the list, all domains having the “mail.yahoo” string (like
mail.yahoo.com, mail.yahoo.in, mail.yahoo.us etc.) will be blocked.
If you configure com in the list, all “.com” domains like facebook.com, google.com, yahoo.com etc
will be blocked.
Applying this policy will restrict access to the listed domains using other protocols also. For example, if the
users try to access the listed domains through protocols such as FTP or Telnet, their access will be
restricted.
Do not configure the Hostname programmed in the Administrative Settings page of Jeeves (under the
Maintenance tab) in this list. Otherwise, access to NAVAN using the programmed Hostname will be
blocked. For more details on accessing NAVAN using the Hostname, refer “Maintenance” .
• To deny access to certain websites on the basis of Keywords, click Website blocking on Keyword
to expand and add the keywords in the list which you want to block when browsed by the LAN
users. If the LAN users (as configured in this policy) browse any website that consist of these
defined keywords, the system blocks browsing of those websites.
Here the system will restrict only websites accessed on Port 80. Keywords configured here will not restrict
website access on Ports other than 80.
• To deny access to certain Destination IP Addresses, click Denied Destination IP Address to
expand and enter the Destination IP Address(es) that you do not want the LAN users to access.
• To deny access to certain Applications by Port, click Denied Application by Port to expand and
configure the following parameters for the application(s) that you do not want the LAN users to
access.
• In Name , enter a unique name for the application. This is just for your reference.
• In Transport , select the type of protocol used during packet transport.
• If you want the system to check only the port number and not the packet transport protocol,
select
Any .
• If you want the system to check the packet transport protocol, you can select TCP or UDP .