Block http/https from certain IPs

[praveen.ghimire]

Hi,

Need advise on how to block http/https traffic from certain IPs. Created an AD group and added the machines to the group and then added a Access Policy to block 3 Protocols but it didn't work.

Any suggestions?

[kushsriva]

Hi,

In the WSA, you can configure Identity Policy based on the IP/Subnet and use this Identity in an Access policy to restrict access.

1). Go to WSA --> Web Security Manager --> Identities.

2). Create a new Identity and under "Membership Definition" --> "Define Members by subnet" enter the IP addresses.

3). Now go to Access policies, create a new Access policy and select the Identity created above.

4). Now you can go to "Protocols and User Agents" for the policy and block the protocols which you do not want the PC's the use.

-- Do Rate if helpful

Regards,

Kush