How do I prevent clients that are not logged in to the domain from surfing the internet?

Although the Enterprise domain control can solve the problem of computer permissions, but if the Internet access can not be combined with the AD domain users, the local area network users can use their own mobile devices or personal computers to access the enterprise network and the Internet, so as to bring security risks to the enterprise network.

For network management and security needs, some local area networks need to prohibit non-domain client Internet access, when the computer or mobile device is not logged on to the domain, the Internet is forbidden, and to force the non-logged on client for Web user authentication, so that can be based on domain users monitoring management.

This article describes how to use the Wfilter Internet Behavior Management System (Wfilter NGF) to prohibit non-domain clients from surfing the Internet. The steps are as follows:

1. Enable the "domain account" function and configure the administrator user name password.

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168697960680.png " Title= "201612081481168697960680.png" style= "white-space:normal;width:900px;" alt= "201612081481168697960680.png" Width= "vspace=" 0 "border=" 0 "/>

2. Select "Match mode" in "Apply Filter" to "Order matching".

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168697849823.png " Title= "201612081481168697849823.png" style= "white-space:normal;width:900px;" alt= "201612081481168697849823.png" Width= "vspace=" 0 "border=" 0 "/>

3. Add a "Prohibit all access" policy to prohibit all protocols for all time for all people.

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168697113589.png " Style= "width:900px;" title= "201612081481168697113589.png" alt= "201612081481168697113589.png" width= "vspace=" 0 "border=" 0 "/>

4. Add a new policy, select the Application object for "account", and select all users in the domain.

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168698109032.png " Style= "width:600px;" title= "201612081481168698109032.png" alt= "201612081481168698109032.png" width= "" vspace= "0 "border=" 0 "/>

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168698747283.png " Style= "width:800px;" title= "201612081481168698747283.png" alt= "201612081481168698747283.png" width= "" vspace= "0 "border=" 0 "/>

5. Set all protocols for domain user "all time" to "allow". and drag this rule to the top. Such as:

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168698121567.png " Style= "width:900px;" title= "201612081481168698121567.png" alt= "201612081481168698121567.png" width= "vspace=" 0 "border=" 0 "/>

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2016/12/201612081481168698100874.png " Style= "width:900px;" title= "201612081481168698100874.png" alt= "201612081481168698100874.png" width= "vspace=" 0 "border=" 0 "/>

As configured above, all domain accounts can access the Internet, and all clients that are not logged in to the domain will be blocked from access. You can also set different Internet behavior management rules for different domain accounts or OUs.

Please note: "Wfilter Internet Behavior Management software" (Super sniffer dog) can also achieve this function, the specific configuration and Wfilter NGF is not the same, please consult the Customer service technician.

How do I prevent clients that are not logged in to the domain from surfing the internet?