Hey there --
So this is an odd thing that's probably it simple fix.. hoping anyway. We have 99% of our PCs on the same subnet and domain, however several of these machines are owned by an outside company and are "borrowing" our internet link. They are in their own workgroup (not on our domain), but share our address space (192.168.1.x/24).
I have an OpenInternet policy that allows users in a specific domain security group full access to the internet; and I have another policy (LimitedInternet) that has strict URL filtering for users not in that group. My question -- is there a way to allow those workgroup computers (either by workgroup or machine name) access to the OpenInternet policy?
Thank you for the reply.. and that seems to work.. should I be concerned about the commit warning that the "Non-domainUsers shadows LimitedInternet"?
The policies are ordered as:
OpenInternet sourceuser: domain\openinternetgroup LooseFiltering
Non-domainUsers sourceuser: unknown LooseFiltering
LimitedInternet sourceuser: any StrictFiltering
And is there any way to include both the domain group and unknown user in the same policy?
"Non-domainUsers shadows LimitedInternet"
Shadow means that your new rule for Non-domainUsers has match criteria that the rule LimitedInternet will never be used. You have essentially replaced LimitedInternet with Non-domainUsers.
If this situation is acceptable then you should delete LimitedInternet.
If this is not acceptable, then we need to look more closely at the match conditions for the two rules to determine how to separate the desired traffic and block what you wish to block.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!