Jump to content
  • Hello visitors, welcome to the Hacker World Forum!

    Red Team 1949  (formerly CHT Attack and Defense Team) In this rapidly changing Internet era, we maintain our original intention and create the best community to jointly exchange network technologies. You can obtain hacker attack and defense skills and knowledge in the forum, or you can join our Telegram communication group to discuss and communicate in real time. All kinds of advertisements are prohibited in the forum. Please register as a registered user to check our usage and privacy policy. Thank you for your cooperation.

    TheHackerWorld Official

深信服AC设备放行定制版QQ及实现只允许访问某邮箱地址的方法

 Share


Recommended Posts

某用户部署一台深信服AC设备,做网桥模式配置,现有两个需求,需求如下:
需求一、需将内网中的定制版QQ放行
需求二、只允许访问某邮箱地址mail.xxx.com,其他所有应用,网页都进行阻止

对于需求一的实现方法:
1、深信服AC开启直通,使用定制版QQ软件,查看直通日志,获取该QQ软件连接的服务器的地址;
2、在系统配置中,全局排除地址的自定义排除地址,添加刚才获取的该QQ软件连接的服务器的地址,并提交生效,即可实现该需求
如下图所示:
http://www.eumz.com/wp-content/uploads/2014/03/定制版QQ全局排除地址.png

对于需求二的实现方法:
在上网权限策略——应用控制中,将该邮箱相关的选项都选择并允许,将SSL协议选中并允许,在URL分类库中新增URL类型,加入*.xxx.com,并将该URL类型,增加到相关的上网权限策略中,将相关策略关联给相应用户即可。

Link to post
Link to comment
Share on other sites

 Share

discussion group

discussion group

    You don't have permission to chat.
    • Recently Browsing   0 members

      • No registered users viewing this page.
    ×
    ×
    • Create New...