WebBlocker/Active Directory authentication
Hello, I have set of five Active Directory bound computers designated for students. Their AD accounts are in a container called 'students'. If I setup WebBlocker per this technote: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/webblocker/examples/webblocker_outbound_auth_user_groups_adauth_wsm.html
My question is this...The powers that be do not want any filtering for any other AD group - just the Students. It is as simple as creating the policies, tying it to the AD 'Students' container, and leaving the rest as-is? Would that allow the office users to bypass WebBlocker? Or, do I have to assign every other user to an "allowed" group and create a policy that way. Thanks!
0
Sign In to comment.
Comments
Have a HTTP & HTTPS proxy policy From: your student AD group To: Any-external, with the desired WB actions
Have a 2nd HTTP & HTTPS policy From: Any-trusted etc. To: Any-external
The 2nd set of policies should automatically be below the student policies
Set up SSO so that the students (and everyone else) get automatically authenticated to the firewall.
Then students should be controlled by the WB action on their policiy and everyone else should not be.
Thanks! Is SSO required to make this work?
SSO allows automatic authentication to your AD
What would the method be if I assigned static IPs to the devices? Thanks again...
OK, just to be clear, I would use IP instead of AD auth?
Thanks, Bruce.