topic Re: Custom User Groups in General Topics

Custom User Groups

ta185020 — Thu, 04 Nov 2010 06:21:50 GMT

Hi,

I would like to add certain users from different Active Directory groups, into a custom group, called VIP users.

i.e. in PA I would like to select users from AD and create a Custom Group. But am not able to get to do this.

I can only add the users individually by selecting them from the AD. But I need to add all the users to

a single group. Called AD VIP Users Group.

How do I do this in the Access Policy rules.

Rgds,

Tauseef Ahmed.

Re: Custom User Groups

mjacobsen — Thu, 04 Nov 2010 06:31:15 GMT

Currently group definitions for users that come from a directory must also come from a directory. Local groups can only be used for local users. To accomplish what your are looking for, you would need to create a new group in AD that contains the users of interest.

Mike

Re: Custom User Groups

ta185020 — Thu, 04 Nov 2010 10:15:14 GMT

Hi Mike,

Thanks for that, in the same manner, can I not have a Group for my destinations.

As in create a Group of IP addresses, and name it as required_sites, can I not do that in the destinations

in access rules.

Or do I need to do this in 'URL Filtering' ??

So what would the rule be if I want to do it in URL filtering ..

Source = any

Source users = usera

Destination = any

Action = permit

in Profile= I choose the URL filtering profile with the destination metioned in the required_sites.

Will this work or is there another work around..

Re: Custom User Groups

mjacobsen — Thu, 04 Nov 2010 16:39:16 GMT

Yes. You can do this. You would create an Address Group and add the desired addresses to the group.

Mike

Re: Custom User Groups

ta185020 — Sun, 07 Nov 2010 05:58:41 GMT

Hi,

How do I do this, when I have addresses as URL's instead of Ip addresses ??

Re: Custom User Groups

mjacobsen — Tue, 09 Nov 2010 07:38:31 GMT

Today you would need to do this in a URL filtering profile. If you want them allowed, you can use the Allow List, if you want them blocked, you can use the Block List. These would only take effect on rules where this profile was applied and it would only effect HTTP (and potentially SSL) traffic.

Mike