topic Re: Allow web-browsing but not for users? in General Topics

Allow web-browsing but not for users?

IpswichSchool — Tue, 06 Aug 2019 10:30:28 GMT

Hello everyone,

First post so please be gentle. I need to have a security rule to allow the Bitdefender application on my servers. Part of the Bitdefender application requires explicit web-browsing. That is obviously easy enough to do. My problem is that I don't want users to then be able to browse the web from those servers but because I have enabled web-browsing as part of the Bitdefender rule, they can.

Is there a way to stop this?

Alex.

Re: Allow web-browsing but not for users?

JulioMancia — Tue, 06 Aug 2019 13:40:22 GMT

Do you have the URL license on your firewall? if you do you can create a custom URL category to only allow the required domains for updating with the AppID's. If you don't have the URL license, you still need the domains that need to be allowed. You could create a rule using fqdn address objects and AppID's, the only problem with this solution is that IP's are contantly changing. I think the default timer for fqdn refresh are 30min.

Re: Allow web-browsing but not for users?

BPry — Tue, 06 Aug 2019 17:08:53 GMT

@IpswichSchool,

A custom URL category would be the way to go here, as @JulioMancia mentioned. Just as a note however, if you utilize a custom URL category you do not need to be licensed to do so. That specific functionality can be utilized regardless of URL Filtering license status.

Re: Allow web-browsing but not for users?

BPry — Sun, 10 Oct 2021 02:45:23 GMT

@Kevin-OHare,

Can you move your question into a new topic. The original question in this thread mentions bitdefender, but outside of that it has nothing to do with what you are asking.