We have a setup where we restrict users access to personal and social sites like twitter and facebook to lunchtimes and out of hours, which is working fine using a schedule.
We however have a select group of users who require full time access to facebook and twitter for the Council pages/accounts (only those sites).
I have tried setting up a rule to allow the Active directory group access to the facebook and twitter applications, but it does not work, it needs web browsing, but then allows that group anywhere.
How can I allow a group of users just to access facebook and twitter in addition to their normal access. Would URL filtering be best ?
Solved! Go to Solution.
You will want to create a rule that allows "source users = Your_group", App = facebook, twitter, whatever" and apply a schedule.
Create 2 or more rules with "App = Web Browsing, SSL". Each one of these web browsing rules can have a different "Source user = ??" and a different URL filtering policy. You can also apply schedules to to each of the web browsing rules. You should not need URL filters for Facebook or Youtube. And your Facebook and Youtube policues do not require web-brosing.
I have a PA-500
I have created a "FaceBookers" AD group that contains users allowed to use facebook.
I have also created a policy:
fromTrust to Untrust, Any source, FaceBookers, any destination, SocialNetworking application (64 results incl facebook, myspace,...), any service, Allow, none 24hrs Daily sched.
1) Why are users who are not a part of FaceBookers group still able to access the site?
2) This is all due to the fact we have OS 10.5 Mac's onsite that we need to restrict Facebook access to. Since they do not log into the domain, we cannot restrict via username alone. Any suggestions there?
You can allow the specific sites for twitter.com and facebook.com in your policies. This will allow you to control them via Apps without needing to open up everything else.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!