How to allow/restrict access to the network for users based on policy?

08/25/2021 30 17057

DESCRIPTION:

How to allow/restrict access to the network for users based on policy?

RESOLUTION:

Configuration:-

1. Navigate to Services |Policies.
2. On the Policies tab, click Add Policy. The Add Policy screen is displayed.
    
3. Use policy owner drop down menu to select the particular user under User policy.
   
   Policies can be created - Globally (applies to All users), per group (applies to a specific group), per user (applies only to that specific user)
4. Under Apply policy to ,Select one of the following options:-
   
   IP Address – If your policy applies to a specific host, enter the IP address of the local host machine in the IP Address field. Optionally enter a port range (for example, 4100-4200) or a single port number into the Port Range/Port Number field.
   
   IP Network – If your policy applies to a range of addresses, enter the beginning IP address in the IP Network Address field and the subnet mask that defines the IP address range in the Subnet Mask field. Optionally, enter a port range (for example, 4100-4200) or a single port number into the Port Range/Port Number field.
   
   All Addresses - If your policy applies to all IPv4 addresses, you do not need to enter any IP address information range in the Subnet Mask field.
   
   Network Object - If your policy applies to a predefined network object, select the name of the object from the Network Object drop-down list. Server Path-  If your policy applies to a server path, select one of the following radio buttons in the Resource field:
   
   
   • Share (Server path) – When you select this option, type the path into the Server Path field.
   • Network (Domain list)
   • Servers (Computer list
   
   URL Object – If your policy applies to a predefined URL object, type the URL into the URL field.
   
   All IPv6 Address – If your policy applies to all IPv6 addresses, you do not need to enter any IP address information.
   
   IPv6 Address – If your policy applies to a specific host, enter the IPv6 address of the local host machine in the IPv6 Address field. Optionally enter a port range (for example, 4100-4200) or a single port number into the Port Range/Port Number field.
   
   IPv6 Network – If your policy applies to a range of addresses, enter the beginning IPv6 address in the IPv6 Network field and the prefix that defines the IPv6 address range in the IPv6 Prefix field. Select the desired Protocol. The available value options in the Protocol field include TCP, UDP, ICMP, and ALL. You can select multiple items among TCP, UDP, and ICMP. However, when ALL is selected, all other options are deselected.
   
   
   
5. Under Service - Select the particular service you want to allow/deny for the user.
   
   
   
6. Under Status ,Select Allow/ Deny.