Access Control Using Proxy Server

Controlling Access by Internet Service

Proxy Server can be configured to provide or restrict access based on
Service type. FTP, HTTP, Gopher, and Secure (SSL) are all individually
configurable.

Controlling Access by IP, Subnet, or Domain

Proxy allows an administrator to control access based on IP Address, Subnet
or Domain. This is done by enabling filtering and specifying the appropriate
parameters. When configuring this security, you need to decide if you want
to grant or deny access to an IP address, subnet, or domain. By configuring
Proxy Server correctly, you can also set it up to use the internet as your
corporate WAN.

Controlling Access by Port

If you are using the WinSock Proxy service, you can control access to the
internet by specifying which port is used by TCP and UDP. You can also grant
or deny, activate or disable certain ports based on your needs.

Controlling Access by Packet Type

Proxy Server can control access of external packets into the internal
network by enabling packet filtering on the external interface. Packet
filtering intercepts and evaluates packets from the Internet before they
reach the proxy server. You can configure packet filtering to accept or deny
specific packet types, datagrams, or packet fragments that can pass through
Proxy Server. In addition, you can block packets originating from a specific
Internet host.

The packet filtering provided by Proxy Server is available in two forms,
Dynamic and Static.

Dynamic packet filtering allows for designed ports to automatically open for
transmission, receive, or both. Ports are then closed immediately after
connection has been terminated, thereby minimizing the number of open ports
and the duration of time that a port is open.

Static packet filtering allows manual configuration of which packets are and
are not allowed.

By default, the following Packet settings are enabled on Proxy Server (by
default, ALL packet types are blocked except the ones listed below, known as
Exceptions):

Inbound ICMP ECHO (Ping)
Inbound ICMP RESPONSE (Ping)
Inbound ICMP SOURCE QUENCH
Inbound ICMP TIMEOUT
Inbound ICMP UNREACHABLE
Outbound ICMP ANY
Inbound TCP HTTP
In/Outbound UDP ANY (dns)

Since we get a lot of donated Step x Step, White Papers and Faq's please let us know if they contain errors by emailing us here.
 

Search or Choose a Link from the top of this page.

Enter your search terms Submit search form   Web CpuCare.net

Search or Choose a Link from the top of this page.

Webmasters, please don't throw away your old whitepapers or Faq's or let them fade away, we would be more than happy to host them here on our site, even if they are antiquated and outdated!