How to block specific users to access some APPs or websites?

Applied scenarios



If all user traffic must go through the EG, so we can take some control policy on EG to control the behavior of users, like access some websites or APPs. Ruijie EG allows to customize block time range and select specified users group for the control policy. Here is the typical topology.



Case of configuration

Step1: Enter the advanced settings and add one behavior policy to block APPs and Websites.



Step 2: Click ‘Add Behavior Policy’ and input the policy name.



Step 3: Click ‘App’ and ‘Website’ in the top left of this page, then click ‘+’ button and ‘click to select’ the APPs and websites to be blocked in this policy.







Step 4: Select ‘App’ in left of this page, then input a name for this APP group, which including APPs you have selected.



Step 5: Select ‘Action’ as ‘Deny and Audit’, it means these APPs (websites) will be blocked and the blocked history to those APPs (websites) will be recorded on EG.



Step 6: Select the ‘Active Time’, it indicates the time when this policy take effect.



Note:

There are two methods to configure the time range, the first one is select the existing time group, the second was customize the time range.



Click ‘Add object’, then input the object name and customize the time range, show as the picture.



Step 7: This picture shows the details of this policy after all settings finished, including the website group, Action and active time which we already selected.



Step 8: Select the user objects (Son) for which the policy takes effect.



Note:

The user need to be created in the local user group before select. It supports to bind specified IP range or mac address for user.

Verification

After all configuration has been done, the users to be blocked won’t be able to access those websites, shown in the following picture.