Anyone familiar with Microsoft ISA Server? Question about restricting web access

R

rlee

Gawd
Joined
Jan 30, 2003
Messages
596
I'm trying to restrict a certain program on client machines to only have access to certain web sites. I installed the ISA server software on the win2k3 domain server. The problem is, if I do web access restrictions, the users won't be able to access other websites using their webrowser besides the one I grant access to. I don't want that to happen, I only want a certain program which uses http traffic on their machines to have restricted access to certain sites. Anyone got any ideas? Thanks.
 
You can restrict traffic based on a signature of the program. Search the forums at the link above.
 
I couldnt find anything on the ISA forums. Can someone point me to the right direction/link? I even posted on the forum there but got no responses. Thanks.
 
use something like wireshark to define a signature for http requests originating from said program.

Add the signature to your regular http access rule (right click rule and choose configure http). This will block all http requests from that program.

Create a destination set with the urls / ip ranges of the external resource you want the program to be able to access.

Add another http rule above that does not restrict the signature (higher priority than your other http rule). Limit this rule to http traffic going to the destination set you created.
 
it may be an all or nothing kind of deal. anyway, i'd trust tom, he's the isa guru.
 
You must log in or register to reply here.
Back
Top