User in different AD groups

Haecker — Tue, 01 Mar 2011 12:48:27 GMT

Hi,

we want to enforce a policy with user groups from AD. USER ID actually works fine.

The following scenario: A single User (e.g. Harry) belongs to different AD groups (e.g. group1 & group2). The policy works with different URL Filtering profiles.

Policy 1 will have Source "group1" and Policy 2 will have Source "group2" as Objects.

Policy 1 is positioned before Policy 2. If User Harry wants to try to reach an URL which is allowed in Policy 2 (group2) it will never match, because Policy 1 matches always for that User regardless if the URL is allowed or blocked.

Has anyone an idea to fix?

Thanks

Stefan

Re: User in different AD groups

kbrazil — Tue, 01 Mar 2011 16:42:33 GMT

Hi Stefan,

Today you need to create an exception URL Profile and Security Rule to handle these types of cases. It is not pretty, but it does work. There will be enhancements to help simplify this type of policy in a future release. It is possible it may come before the end of this year.

Cheers,

Kelly

topic User in different AD groups in General Topics

User in different AD groups

Re: User in different AD groups