FireSight

[amhabdallah]

Hi All ,

I have Cisco 5525 firewall and use FireSight to managed it , kindly i need to deny unauthenticated domain users from access to internet , Could you help me ?

Regards,

[Aastha Bhardwaj]

Hi,

Check this : http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118738-configure-firesight-00.html

You can integrate Ldap , and then create a allow policy based on the groups that you want to allow and block rest of the traffic.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[amhabdallah]

Hi , thanks for your reply 

I already do this before , but the problem when i make the default Action ( Black All Traffic ) No one even the administrator access the internet .

Regards,

Thanks for your help and support .

[Christopher Bell]

Make sure you are putting your rules in the correct order in the Policy section.  First you need to allow authenticated users, then block everyone. 

[amhabdallah]

The rules in a correct order , the first rule allowed all authenticated and the last rule is block Any Any , but still blocked all users even the administrator .

Thanks ,