McAfee SG310, Administration Manual

Page: 206 / 412

206 McAfee UTM Firewall 4.0.4 Administration Guide
Firewall menu options
Access control
For more detail on how access controls interact with other firewall features such as packet filtering and IPS,
see
Controlling packet traffic .
Authorizations page
Use this page to limit which users have access to the Internet through the appliance.
Figure 207 shows the access control main authorizations page.
Figure 207 Access Control — Main tab
Enabling access control
Use this procedure to enable access control. Access control must be enabled in order to use ACL, Web
Filtering, and other access control mechanisms available within the Access Control menu option.
1
From the Firewall menu, click Access Control > Main tab. The Authorizations setup page appears.
2
In the Enable Access Control pane, select the checkbox or boxes for the firewall classes to which you
want to apply access control. At least one checkbox must be selected for any access control operation to
take place. Available options are:
• Private (includes the LAN, VPN, and Dialin firewall classes) – Enables access controls on traffic
originating from devices on the internet.
• Internet – [Recommended] Enables traffic destined to the private network.
• DMZ – Enables traffic destined to the DMZ.
• Guest – Enables traffic destined to the Guest network.
3
[Optional] To require users to authenticate for access to the Web through the UTM Firewall appliance,
select the Require User Authentication checkbox. This checkbox must be selected to view Web
Filtering reports on an individual user basis. For more information, see
Enabling McAfee Web Gateway
content filtering . The browser must also be configured. See Configuring browsers to use the appliance
Web proxy .
Access control users should generally have only the Internet Access (via Access Controls)
checkbox selected, with all other access permissions cleared. For information on setting up users, see
Creating a user .