topic Allow certain URLs only for a specific user in General Topics

Allow certain URLs only for a specific user

MohammedL — Tue, 10 May 2016 19:30:07 GMT

Is there any way to restrict a certain user to only a few websites?

There is URL filtering but I believe that is global and I wanted for only one user

Re: Allow certain URLs only for a specific user

rmonvon — Tue, 10 May 2016 19:46:25 GMT

You just need to create a new URL filtering profile and apply to that user.

Re: Allow certain URLs only for a specific user

MohammedL — Tue, 10 May 2016 19:50:08 GMT

Thanks for your response, when I create the URL filtering profile only allows me to include the URLs I want to allow/block, there is no particular section where I can select a user. Please correct me or guide me if I'm wrong

Re: Allow certain URLs only for a specific user

rmonvon — Tue, 10 May 2016 20:02:09 GMT

You will need to define a security rule under the Policies tab. This rule should match on source=user action=allow and attach the URL filtering profile to this rule. Make sure this new rule is positioned above any rule that may match on the user.

Thanks,

Re: Allow certain URLs only for a specific user

MohammedL — Tue, 10 May 2016 20:25:21 GMT

Ok thanks. So when I create new security policy, I go to the users tab and there's only one user list for all users. I'm guessing I can manually type the domain/userID here.

Just to confirm, I would create a new URL Filtering profile, allow the URLs I need to allow. Then create a new security profile (and position is #1 probably), the rule would be source (LAN zone), user (manuallty type a username), URL category I created and apply it.

Hoping that's it

Re: Allow certain URLs only for a specific user

rmonvon — Tue, 10 May 2016 20:38:12 GMT

@MohammedL wrote:

Ok thanks. So when I create new security policy, I go to the users tab and there's only one user list for all users. I'm guessing I can manually type the domain/userID here.

- Yes, assuming userID is setup & working you should see listing of users and you can choose the user from the dropdown. You shouldn't have to manually type in the userID. Otherwise, you will use source_address=IP_of_user to match.

Just to confirm, I would create a new URL Filtering profile, allow the URLs I need to allow. Then create a new security profile (and position is #1 probably), the rule would be source (LAN zone), user (manuallty type a username), URL category I created and apply it.

In the security rule, you need to select the URL profile from the Profile Setting:

Hoping that's it

Re: Allow certain URLs only for a specific user

MohammedL — Tue, 10 May 2016 22:30:34 GMT

Thanks again. The usernames aren't setup, I only see a 'all user list', in that case like you said source IP, would that also be entered in the source tab?

Thanks.

Re: Allow certain URLs only for a specific user

reaper — Wed, 11 May 2016 07:42:37 GMT

you'll first need to configure UserID which will then populate your list of available users

please read this article to help you set that up: Getting Started: User-ID

Re: Allow certain URLs only for a specific user

rmonvon — Wed, 11 May 2016 13:59:15 GMT

Yes, the source tab will let you define the IP address for the source user, i.e 192.168.5.5.

Re: Allow certain URLs only for a specific user

MohammedL — Wed, 11 May 2016 14:29:32 GMT

Ok I'm sorry to ask you again.. Do I have to necessarily create an object for that one IP address or can I once manually type the IP there?

Re: Allow certain URLs only for a specific user

rmonvon — Wed, 11 May 2016 14:35:18 GMT

I would create a new address object.