Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: integrated user firewall: domain user on non-domain computer

$
0
0

I did it already

 

show configuration security policies from-zone trust to-zone untrust 
policy test {
    match {
        source-address slonlaptop;
        destination-address computerra.ru;
        application any;
        source-identity unknown-user;
    }
    then {
        permit {
            firewall-authentication {
                user-firewall {
                    access-profile ldap;
                }
            }
        }
        log {
            session-init;
        }
    }
}
policy test2 {
    match {
        source-address slonlaptop;
        destination-address computerra.ru;
        application any;
        source-identity "domain.com\oborisov";
    }
    then {
        permit;
    }
}

First I set source address to any and try to open computerra.ru, logged in as domain user oborisov  - site opend. Secondly I set source-address to my laptop and try to open site - I got a login/password form. And regardless of the input data - I cant get access to site.

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles