Question : Restricting all the sites to access internet except one site...

Hi friends !

I have running Workgroup model and all the computers are using ISA 2000 Server as Proxy Server for internet. I am running 192.168.5.0 /24 network.

In the library, all the computers are using particular software that needs internet so internet cant be disconnected.  But I want that the users of these computers cannot access other sites except the one used by library software.

I went in Internet Options and in Security Tab--->Restricted sites, for testing, I gave www.yahoo.com as restricted site, but when I typed www.yahoo.com in Address Bar, I was able to access this site.

Is it due to Proxy Server ?

Do I need to restrict the sites on Proxy Server ? Is there no way to allow only one site on an individual computer ?

Any idea to do it !

 I have heard about Zone Alarm but I have not used it. And I dont want to purchase any costly product as budget doesnt allow me to do so.

Please help me in this regard.

Thanks,

Hemant

Answer : Restricting all the sites to access internet except one site...

Greetings Hemant,

Best way to restrict sites at proxy level
On ISA Server 2000 you can follow these steps to Block or Allow particular website(s)

1) You need to make 'Destination Set' inside "Policy Elements" and add all websites that you want to Allow or Block (you can add full domain like: *.yahoo.com)

2) Make 'Client Set' inside "Policy Elements" and add workstations (add IP addresses) that you want to Allow or Block

3) Make "Site and Content Rule" inside "Access Policy" select "Allow/Deny" then select "Custom"  then select "Specified Destination Set" **OR** select "All destinations except selected set" from drop down list then select "Specified Computers" and add client set that you have made in step-2, then select "Any Content Type" then Finish.

Hope this help!
Farhan