topic Security rule based on Virtual proxy used in Management & Governance

Security rule based on Virtual proxy used

Mon, 07 Aug 2017 07:37:09 GMT

Can I set a security rule based on Virtual proxy the user used at login? We'd like to open logging to public internet, for example for mobile users etc. If we allow login from public internet it will come thru a specific virtual proxy. But we would like to give access to restricted content that way, so we'll put that to another stream. Rest of content (the more sensitive content) will be accessible by logging in thru another virtual proxy. Or is it so that once user gets in, he/she sees everything they see, no matter how they log in?

Re: Security rule based on Virtual proxy used

Vincenzo_Esposito — Wed, 09 Aug 2017 19:21:05 GMT

One solution is to enable the extended environment (from proxy configuration). This allow you to track the client IP address (expect the outer request come through a different network class). You should write a security rule using it (user.environment.ip) to restrict the access to certain content for those coming from outside

Re: Security rule based on Virtual proxy used

Thu, 10 Aug 2017 07:23:55 GMT

Thanks Vincenzo! So to use the user.environment.ip in the security rule, I just need to assign some wildcard to evaluate if the traffic is from inside, right? I mean I won't know every single IP.

Re: Security rule based on Virtual proxy used

Vincenzo_Esposito — Thu, 10 Aug 2017 11:54:34 GMT

Yes you should use wild character (*) and like instead the equal sign.

Re: Security rule based on Virtual proxy used

Thu, 10 Aug 2017 11:56:49 GMT

Thanks ves