Allow internet only after HIP fail

mikembau — Mon, 01 Oct 2018 23:52:34 GMT

We are looking to configure the firewall rules where if a known user fails the HIP check, the user has access to only the internet, and not the intranet.

I currently have the rules configured such that failing the HIP check allows the user to access to both the internet and the intranet. We tried blocking RFC1918 in the destination address field, but this blocks my proxy servers that all outward traffic must go through.

Any ideas?

Re: Allow internet only after HIP fail

Mick_Ball — Tue, 02 Oct 2018 14:20:24 GMT

to keep it simple could you not just add an allow rule based on HIP fail to allow access to proxies only, followed by your RFC1918 block if still needed... you may only need the first allow...

topic Re: Allow internet only after HIP fail in General Topics

Allow internet only after HIP fail

Re: Allow internet only after HIP fail