Configure firewall rules for users object

Question

Hi every body/ I'm no familiar with XG so much (I have UTM). 
 Is it possible to configure rules in firewall in XG to use "user" or "user group"? 
 The XG gets the user list thru active director. 
 My goal is to create a firewall rule based on users group object (Not IP). hop It's clear 
 
 Thanks Goldy.

Vivek Jagad · Answer

Hello Goldy_01 , Thank you for reaching out to the community, please refer the following KBA _ user-based firewall rules - https://support.sophos.com/support/s/article/KB-000035564?language=en_US#

LuCar Toni · Answer

You are currently trying to allow traffic based on a DNS Name, which is more likely a CDN based URL. 
 So you should first check the live users, if your use is authenticated. If not, go back to the steps mentioned above: https://support.sophos.com/support/s/article/KB-000035564?language=en_US The firewall needs to know the IP based on your User. 
 Then you should create a LAN to WAN Rule with ANY Service and your user. 
 Then you should enable the web proxy in the firewall rule, within the webfilter you can allow/deny based on user groups.

Vivek Jagad · Answer

There are various authentication method, if you do not have intercept X then you can opt for another auth method , like captive portal or SSO, agent, NTML or Radius/AD SSO

Configure firewall rules for users object

Top Replies