Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Extending ISA
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Extending ISA - 4.May2008 12:08:59 PM
|
|
|
fixitchris
Posts: 124
Joined: 23.May2007
Status: offline
|
ITENG:
how about to do a GUI that would disable, enable rules remotely.
for example, i used to work in a school, where the teacher needs to enable the rule to be used by his student, once his lecture ends, he needs to disable the rule.
as an ISA admin, i dont wish to give admin access for every teacher, so to have a simple stand alone GUI that would enable disable rule(s) remotely is a wonderful solution.
< Message edited by fixitchris -- 12.May2008 3:53:55 PM >
|
|
|
|
|
RE: Extending ISA - 4.May2008 12:11:14 PM
|
|
|
fixitchris
Posts: 124
Joined: 23.May2007
Status: offline
|
Something like this I would recommend creating via a web service. The reason for this is that the ISA remote console would have to be installed only on the web server.
How should we get around the security issue of what teacher should have control over which rule?
|
|
|
|
|
RE: Extending ISA - 4.May2008 12:20:59 PM
|
|
|
ITEngineer
Posts: 258
Joined: 3.Feb.2006
Status: offline
|
If you want to develop it as a web interface, then each teach would have to authenticate first via a logon page, and then based on that provided credentials, a set of permitted actions would be granted to the teacher.
these permitted actions would be supplied by the isa admin to each teacher
|
|
|
|
|
RE: Extending ISA - 4.May2008 12:50:02 PM
|
|
|
fixitchris
Posts: 124
Joined: 23.May2007
Status: offline
|
This would work, however now we're getting into developing a database to keep track of teachers, rules and actions.
http://technet.microsoft.com/en-us/magazine/cc462798.aspx
If this is a active directory enabled domain, then what we can do is add attributes to each user such as:
syncio-ISA_Array_Permissions
syncio-ISA_Rules_Allowed_To_Admin
syncio-ISA_Rules_Permissions
Array Permissions:
Update configuration
Restart services
Rules Permissions:
Full control
Disable
Enable
Traffic destinations
modify Users
example:
syncio-ISA_Array_Permissions=U
syncio-ISA_Rules_Allowed_To_Admin=LAB1::LAB2::CLASSROOM1
syncio-ISA_Rules_Permissions=DE::DE::DEU
< Message edited by fixitchris -- 6.May2008 9:44:45 AM >
|
|
|
|
|
RE: Extending ISA - 6.May2008 10:05:54 PM
|
|
|
fixitchris
Posts: 124
Joined: 23.May2007
Status: offline
|
Regarding the splash screen... you want to pop up once when user goes to google.com and then again when he decides to go to yahoo.com??? or do you want it to pop up only when he first opens IE? If you want it only when he first opens IE then you can deploy a custom home page with group policy in a windows domain.
The other way, someone would have to write an extension on the TCPIP stack known as a layered service provider (eg. Firewall Client), or an ISA filter. I am not a very good C++ programmer.
< Message edited by fixitchris -- 6.May2008 10:13:53 PM >
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
, i know nothing when it goes for programming 
