Hi,

 

We use a bankingsoftware "isabel" (wich always causes problems, to install, to use etc... its not the best software around).  But hey, you're forced to use it by the banks.

 

When the SBS2003 premium was installed (about a year ago) we had to create a rule (helpdesk bank) wich allows all traffic from all users to the outside.  (????) At that point ISABEL worked. so we left it that way.

 

Last week they called me to block 2 users from the internet. So i followed the whitepaper (Block Internet access for certain URL's and security groups). So that worked.  But now the lady who uses ISABEL calls in to say she can't use it anymore. If i change the order of the rules, then she can work but the 2 blocked users can surf the net again and vica versa.

 

These are the rules :

 

1. ISABEL rule :

Allow -> All outbound traffic -from- Internal -to- External -for- all users

 

2. Blocking rule :

Deny -> all outbound traffic -from- Internal -to- Blocked websites -for- sbs restricted users

 

In that order the banking software works. If i switch the order. The banking software doesnt work anymore, nevertheless that the blocking rule is only for the sbs restricted users ??????

 

If in the first rule, i change "all users" to a security group with one user (the lady of the banking software), then the software doesn't work also ?????

 

Greetz,

Jo

???

If you go to the wizard of creating a new access rule, the first window is to allow OR to deny.

But you can't select allow and deny in one access rule ?

 

How do you do that ?

 

Greetz,

Hi Jo,

 

No, you can't select both allow and deny in one rule. What you can do, is select deny, and after you have created the rule, go to the properties again, and in tab Action you can redirect to e.g. the companyweb if the user is trying to access the website(s) you have denied.

Hi,

 

Maybe i didn't explain myself clearly. The redirect you say, worked fine immidiatly (made my one webpage)

 

I have 10 users (all have initial internet access)

1 user uses a banking program ISABEL (wich needs a isa rule to function)

2 users need to be denied access to the internet.

 

So i created 2 rules in ISA :

For the blocked guys, i followed the whitepaper (Block Internet access for certain URL's and security groups). 

 

Rule 1 (for the banking software)

Allow -> All outbound traffic -from- Internal -to- External -for- all users

 

Rule 2 (for the blocked guys)

Deny -> all outbound traffic -from- Internal -to- Blocked websites -for- sbs restricted users

In that order the banking software works and the users that needed to be blocked can surf the internet. If i switch the order, the banking software doesnt work anymore, nevertheless that the blocking rule is only for the sbs restricted users ??????
 
If in the first rule, i change "all users" to a security group with one user (the lady of the banking software), then the software doesn't work also ?????

 

Greetz,

Hi Jo,

 

Did you figure this out yet?

hi,

 

No, what i did was, throw the 2 users, ho need to be blocked,  out of the "internet users".

so they can't surf anymore.  The solution is not so nice, but it works.  As i've been spending hours and days already at that stupid bank-software (isabel), that seemed to be the only way to do it.

 

Regards,

Jo