Limit Internet threshold for users

Similar Questions

• ASA 5505 - order Internet access for users

  Hi all

  I have a Cisco ASA 5505 connect my LAN over the internet using NAT/PAT. I want to restrict access to the internet on ports 80 and 443 on a per user basis.

  That is to say access to management staff while limiting the general staff.

  I understand how this on a per device level by creating an access list to block certain IP addresses to the internet, but I would limit some users.

  I guess they will have to authenticate to the ASA some how.

  Pointers?

  TIA.

  You need to set up the Cup via proxy in ASA.

  Here is the configuration that we add on ASA:-

  access-list WEBAUTH permit tcp any any eq 80

  access-list WEBAUTH permit tcp any any eq 443

  AAA authentication WEBAUTH indoor soccer match

  AAA authentication secure-http-client

  AAA authentication listener http inside port www redirect

  Redirect the AAA authentication listener https within the https port

  http://www.Cisco.com/en/us/docs/security/ASA/asa72/configuration/guide/fwaaa.html#wp1043431

  http://www.Cisco.com/en/us/docs/security/ASA/asa72/command/reference/a1_72.html#wp1437427

  Kind regards

  ~ JG

  Note the useful messages

• Monitor internet traffic for each user in windows 7

  In a stand alone system (a customer) with multiple user accounts, how can I monitor / limit internet traffic data?

  Please enter a software

  Hi Nima,

  Thanks for posting your query on the Microsoft Community.

  According to the description, I understand that you want to monitor internet traffic data.

  I suggest you to refer to the suggestions of Shekhar S replied on 12 January 2011 and check if that helps.

  http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-Networking/Monitor-Internet-traffic-on-Windows-7/25dbc14f-8190-46b6-b1fe-3b8f0cd550cd

  Hope this information helps. Please let us know the results. We will be happy to help you further.

• Limit Internet users

  Hello, I wanted to ask if this is something that could be done through the application server or just the firewall. I have the server running the DHCP protocol for users in the office, that's why I wanted to know if I can maybe the server did not assign an IP address to a certain MAC address during certain periods of the day. With this same vein, I also reproduced the users of the network, I don't know where are these users and I wanted to see if the server will be reduced by giving the IP addresses of these machines.

  Blocks internet access at the end of the connection, the client - or somewhere along the connecting track.   Blockage of the customer implies something like Parental control.    Blocking of access to the network via the connection path involves both the network firewall and a proxy server.

  OS X Server is not usually configured in the path of the network connection, and there are no.app of UI for a proxy on OS X Server.

  Server.app UI has not requested DHCP configurability.

  It is much more easily possible to provide in a specific subnet addresses and blocks, although users can still manually assign addresses to circumvent this.

  As customers - those who have the ability to manually set an IP address - can potentially work around this problem with a fixed address or with an automatic address assigned, it seems no obvious advantage to remember an IP address.

  The normal path to locate the "rogue" hosts is to check the configuration of network via access points and (managed).   Some managed switches can also be configured with MAC or port security, which increases the difficulty with unreliable connections.

  Internet access is limited only through firewall.

  Some general information on the environment and the general problem that you are working towards here, and what is meant by 'duplicated along the network users' could get an idea or lead to other alternatives, too.

• Limit the number of results when searching for users?

  Hi all.
  
  The following rule works very well:
  

    <invoke name='toList'>
      <invoke name='listObjects'>
        <ref>context</ref>
        <s>User</s>
        <map>
          <s>conditions</s>
          <list>
            <new class='com.waveset.object.AttributeCondition'>
              <s>DEFERREDTASKDATE</s>
              <s>notPresent</s>
              <s></s>
            </new>
          </list>
        </map>
      </invoke>
      <s>name</s>
    </invoke>

  But in the production environment, we want to limit the number of results to a manageable level, say 200 users. I tried resultLimit and LignesMax in the stock option plan, but nothing helped.
  Pointers to help me in the right direction?
  
  Best regards
  Stefan

  The JavaDoc for AttributeCondition does not list these operators or conditions.

  You will need to add conditions to your query that limits the response by other means.

  I don't know what your user name looks like, but for us, we have an ID for each account that you could put limits to

  i.e.

  UserID > current_place and userid< current_place="" +="">

  that, if the user name is a number, would limit the answer to a maximum of limit, but if no user is in the meantime it would obviously be zero.

  the alternative is to create your own rule to query the repository on your own and use the resulting data to browse normal calls.
  It's a bit heavy if you use attributes that are not available at hand, only existing in the xml BLOB

  I also think that you could make your own javaclass and do the same thing, but I'm just not proficent in java as to who try here: P

• remove the time limit of expiration password for users to ocs

  Hello
  
  I want to know how to remove the time limit of expiration password for users to ocs (GR 11, 2)? In our system, all user accounts are expired is in 1 week. I have to remove expdate. (the profile has been modified)
  
  THX

  SQL > select * from dba_profiles where RESOURCE_NAME AS "PASSWORD_LIFE_TIME;

  PROFILE RESOURCE_NAME RESOURCE LIMIT
  ------------------------------------------------------------------------------------------
  PASSWORD_LIFE_TIME 180 DEFAULT PASSWORD

  MONITORING_PROFILE PASSWORD_LIFE_TIME DEFAULT PASSWORD

  SQL > ALTER THE DEFAULT LIMIT PASSWORD_LIFE_TIME PROFILE UNLIMITED;

  Modified profile.

  SQL > select * from dba_profiles where RESOURCE_NAME AS "PASSWORD_LIFE_TIME;

  PROFILE RESOURCE_NAME RESOURCE LIMIT
  -------------------------------------------------------------------------------------------
  PASSWORD_LIFE_TIME UNLIMITED PASSWORD

  MONITORING_PROFILE PASSWORD_LIFE_TIME PASSWORD

  To change the password of a user:

  change the username identified by new_password;

  Published by: hitgon on April 30, 2012 19:33

• How to limit the demand for the other user research based on employee Type

  Hello
  
  I have a requirement on which applicant on the function of "Demand more", should have an option for users to filter by employee Type here. In the now I can't see a feasible way to guarantee this. Is this acheivable. Can we add a search attribute more to the page user of MSN Search feature "request on the other. Any ideas Guyz?
  
  Thanks and greetings
  Swati Pandey

  The example I pasted was my request. Please check the path of the Agent.xml in the OIMUI.jar for your use case and edit the appropriate file. Also what version of IOM are you on? I believe that the path has changed in 11.1.1.5 and example for 11.1.1.3

• What is the limit of storage for "indexDB" in Firefox 4?

  What is the limit of storage for "indexDB" in Firefox 4?

  I need to know because I write a significant demand with local storage requirements.

  More the 5 MB limit in the Local Storage API.

  Your response is appreciated.

  Thank you
  David

  If the user grants permission for a site to exceed the quota of 50 MB IndexedDB, then as much as I know Firefox is no limit more. The only limits on the size of the IndexedDB database will be the disk space of the user and operating system.

  The quota of localStorage is 5000KB and there is no way for a web site asking the browser for permission to store more than that amount in localStorage.

• Mac Mini server files for users of 50 +.

  Hello

  Our current file server is the last of the Xserve running 10.6.8.  It's getting up there and if it's the toasted bread, so I am. If I get nervous.

  I waited for a refreshment HW of Deputies and Minis, but none have been forthcoming and I don't see even in Active rumors about them. If Apple decided professional users can take a flying leap which will suck because I'm already doing a HyperV Windows 2012 nightmare and I want more. But I digress...

  Anyone used later (also older than it is) makes Mac Mini with a Promise RAID as a file server for users of more than a dozen? We have a staff of 50 more or less, more use as a store of files for our portal and web server (each on a machine separate with mounted shares) of CrushFTP file sharing.  I would like to know popular experience actually using a Mini to serve that many users and if the aggregation of links to one of the thunderbolt with ethernet port ports actually works.

  Anyone done this? How is the performance?

  Thank you

  Jeff

  Not many users, but one of my clients is written four or five DTV full-HD video streams in couple of tables Promise Pegasus configured RAID-6, and the berries barely noticed the load.   This along with the generation previous Mac Mini.   The limit you will probably hit here, it's how much you can stuff through the Gigabit Ethernet, which probably means using a bolt of lightning for the Ethernet card or two - the bottleneck will be on the LAN side.  But I suspect that you will have to prototype your load in all cases.

• Adjust the threshold for rule interrupts

  Hello

  Can someone help me change the thresholds for the interruptions of rule? It seems to make use of an internal function called thresholdState(#interrupts#) to determine criticality. This user is editable to change the thresholds, or at least to understand the condition behind it?

  Hello

  If I understand this rule is using the Intelliprofile feature. If you search for "thresholdState" on this page of the documentation , you can find the article that explains it. I say think because I watched this metric in the documentation and it does not say that there was a defined threshold IntelliProfile, as for other measures. Maybe it was an oversight of the documentation. He certainly looks like he got IntelliProfile thresholds in the topology for this measurement model, see example on our Linux servers, showing a Normal state:

  

  If the answer to your question, yes the thresholds are user editable but maybe not in your way of thinking. As there is a threshold of IntelliProfile it is based on the deviation from the baseline, whereas you would have to change the threshold of IntelliProfile beaches. I don't think that's what you want with your question.

  Hope that helps.

  Kris

• How to block internet access to users on the local computer. The machine is sub domain control.

  How to block internet access to users on the local computer and the machine is in sub domain control.

  Hello

  Thanks for posting your query in Microsoft Community.

  Your question is beyond the scope of what is generally answered in this forum of consumer and would be better suited for the IT Pro TechNet public.

  Please post your question in the TechNet Forums.

• Can I restrict or limit internet access on a farm in RDS?

  Location:
  -need to allow remote access to the farm of RDS Internet of remote sites (without VPN)
  -Sessions close require access to the intranet using IE (Dynamics CRM)
  -Some users do not use internet in a responsible manner (wasting time, inappropriate sites, etc.)
  -need ability to prevent browsing of the sessions

  I know that we could set up a proxy server (IAS or similar) at Headquarters but I can't handle this being rather long and frustrating for users (and so myself).  I have also no prior experience in the implementation or management of a proxy server (just to know that they can cache and filter web site traffic), so one for 300 active users on the portal management would be a problem.

  If I want to avoid using a proxy server at Headquarters can I do a GPO or something to prevent casual internet browsing from just the servers in the farm?  If we can allow access to specific sites (white list) which would be an interesting option, but not a condition in this regard.

  We review to implement a form of filtering on remote sites affected (using K9 agents on computers personal or similar) of the internet, so we should just remove the back door of the use of the farm to browse the internet and circumvent the once connected local filtering.

  Remote sites use stations XP and Win7, configured in mode working group.  Each site has 2 to 4 computers.  Remote sites share their internet access with computers not relating to staff, so we are reluctant to restrict internet access for all users on the site (using the subscription services provider of firewall for example).  There are more than 20 remote sites.

  The farm is built using the 2008r2sp1 server.  We have a RDS (also a dedicated redirector) gateway and 4 session host servers.

  Any ideas?

  Try asking in the Forums of Windows Server:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

• ISE Corp. Internet access static user authentication

  Hello gentlemen,

  I have a small question on the type of authentication that I can use for the CORP users who want to access Internet & some in-house applications on their Android devices and they should not be re - authenticate when they move between sites to connect to the same SSID when they film in different sites.

  The configuration looks like below: -.

  USER (needs static auth to move between sites)--> SSID--> WLC--> ISE (common to all sites)

  Please can you suggest the best way for users to type Android with name of user and password similar authentication when they move in different sites.

  Thank you

  D

  Hello

  you have 2 choices:

  -users log on SSID using their Active Directory/LDAP credentials. Once they connect, credentials are stored on their devices, and they will be able to reconnect without repeating the authentication.

  -make BYOD, this means you force, was the first connection, users to enroll a certificate. More secure solution. In reality, they authenticate the 1st time with their powers AD/LDAP and before obtaining access, they will be popup to a web portal to register their devices.

  the 1st solution requires only basic licenses and 2nd requires MORE licenses. Basic license, have to buy you them once that's all. As well, it is the licence renewal (1y, 3y and I think more than 5 years).

  on deployments, than I do today, companies prefer the use of certificates from the user/password and the server certificate is ISE. In this case, you are not related to the systems guys, and if something is compromised, you can manage the revocation of certificate directly to the LSE instead of ask a person to system to disable the user account on AD.

  hope this is clear.

  Thank you

  PS: Please do not forget to rate and score as good response if this solves your problem

• OIM 11 g: search query for users with a particular resource

  I have a custom resource that has a search on this query to find a list of users. It works very well. I can find the user by username, email or name and first name.
  
  Existing query:
  
  Lookup column name: = usr_login
  Column names: usr_key
  Legends of the column: key, username, Email, name and first name
  The width of the columns: 10, 100, 100, 100
  Search query: select usr_key, usr_login, usr_full_name, usr_email usr
  
  What I want to do is limit the scope of the search query to find only provisioned users with a specific resource. I want to choose users have the MS Exchange resource assigned to them.
  
  Can someone help me with the creation of the search query that allows you to search for users who have a particular resource put into service? This table contains a list of the resources allocated to a user?
  
  Thank you.

  use under request

  SELECT USR. USR_KEY, USR. USR_LOGIN, USR. USR_FIRST_NAME, USR. USR_LAST_NAME, OBJ. OBJ_NAME, OST. THE USR, OUEDRAOGO, OST, OBJ OST_STATUS
  Where USR. USR_KEY = OUEDRAOGO. USR_KEY
  AND OUÉDRAOGO. OST_KEY = OST. OST_KEY
  AND OST. OBJ_KEY = OBJ. OBJ_KEY
  AND OST. OST_STATUS IN ('Provisioned', 'Disabled', 'Enabled')
  AND higher (OBJ. OBJ_NAME) = upper ("name of your resource object")

  update status, name of the resource object, and then select the attribute accordingly

  -nayan

• Cannot upgrade/change/install Flash Player versions? For users of ZoneAlarm, here is a solution.

  For the past two weeks now, I was faced with the problem of not being able to properly install my flash version 9 player. I get would be the installation, of course, but they would be damaged facilities. I can't view certain websites in flash, and they stop install me FlashPlayer, even when I have version 9! At least that's what the computer tells me.
  
  After scouring all over the internet for similar problems, I noticed these cases more correlations. Another dilemma plagued me little time after, I realized that I couldn't change my homepage as well!
  
  Then I read the various cases of other people and what was striking, but they seemed all use ZoneAlarm firewall products. Soon, I found that the new firewall/OS product feature is the suspect.
  
  For users of ZoneAlarm Firewall (specifically with detail using OSFirewall versions), OSFirewall might lock your internet settings, startup programs, host file, but more importantly, your ActiveX files! Zone Labs included this feature to make the product much more coldly, but they do not realize that we, the users, need these files as well.
  
  The solution is simple. Simply navigate to the control program in ZoneAlarm (I use Pro). In the main tab, you should see the "Program Control" options. Below, there is a button "Custom". Click on that and go to the tab "OSFirewall" Alto! There are these turds. Left-click on the second column options will give the choice to leave. If you want to make sure that this unnecessary feature don't mean your settings again, I suggest you give all the permissions 'Allow' (notches).
  
  NOTE: even if you disable 'Program Control' or OSFirewall, you need to activate OSFirewall and change the permissions. This is because permission settings will be always locked to those present. In big, even if you disable OSFirewall and have the "Install ActiveX" setting refuse, it is still in denial permission. Check the marks all the way.
  
  If you still have problems, and you still feel that ZoneAlarm is the cause of the problems, I suggest you go tab 'Programs' from the control program. Here, you can view all the applications you have run your PC. Search for 'Macromedia' or 'Flash' of linked files and gives them all access to the internet and all the permissions. If you are not sure, remove all the non-Microsoft programs listed to reset these settings. When you install Flash Player again and you see requests for permission, just "let them".
  
  PS OSFirewall is not available on the free version of ZoneAlarm. Also, to make sure that ZoneAlarm is the cause of the problems, run a complete spyware and a virus scan. Most of the malware time causes these problems as well. Happy computing!

  For the past two weeks now, I was faced with the problem of not being able to properly install my flash version 9 player. I get would be the installation, of course, but they would be damaged facilities. I can't view certain websites in flash, and they stop install me FlashPlayer, even when I have version 9! At least that's what the computer tells me.

  After scouring all over the internet for similar problems, I noticed these cases more correlations. Another dilemma plagued me little time after, I realized that I couldn't change my homepage as well!

  Then I read the various cases of other people and what was striking, but they seemed all use ZoneAlarm firewall products. Soon, I found that the new firewall/OS product feature is the suspect.

  For users of ZoneAlarm Firewall (specifically with detail using OSFirewall versions), OSFirewall might lock your internet settings, startup programs, host file, but more importantly, your ActiveX files! Zone Labs included this feature to make the product much more coldly, but they do not realize that we, the users, need these files as well.

  The solution is simple. Simply navigate to the control program in ZoneAlarm (I use Pro). In the main tab, you should see the "Program Control" options. Below, there is a button "Custom". Click on that and go to the tab "OSFirewall" Alto! There are these turds. Left-click on the second column options will give the choice to leave. If you want to make sure that this unnecessary feature don't mean your settings again, I suggest you give all the permissions 'Allow' (notches).

  NOTE: even if you disable 'Program Control' or OSFirewall, you need to activate OSFirewall and change the permissions. This is because permission settings will be always locked to those present. In big, even if you disable OSFirewall and have the "Install ActiveX" setting refuse, it is still in denial permission. Check the marks all the way.

  If you still have problems, and you still feel that ZoneAlarm is the cause of the problems, I suggest you go tab 'Programs' from the control program. Here, you can view all the applications you have run your PC. Search for 'Macromedia' or 'Flash' of linked files and gives them all access to the internet and all the permissions. If you are not sure, remove all the non-Microsoft programs listed to reset these settings. When you install Flash Player again and you see requests for permission, just "let them".

  PS OSFirewall is not available on the free version of ZoneAlarm. Also, to make sure that ZoneAlarm is the cause of the problems, run a complete spyware and a virus scan. Most of the malware time causes these problems as well. Happy computing!