ISA 2004 and 'on demand' internet access 1

[pchartwell]

I have a situation where I am being asked to only allow 'unlimited' internet access to a select group of users. For the rest, they are to request internet access and the approver should have the ability from their workstation to give access to that specific user account (or machine, etc). Even better if the approver doesn't have to remember to shut off the access later but can set a length of time (1 hr, 1 day) for the access to be on and then return to a disable default automatically.

Is this the type of thing that ISA (2004) will give me?

 

[dput]

I don't believe that ISA will do that. I am not aware of any add-ons that would allow this either. It can be done, but by an administrator.

Dan

 

[pchartwell]

dput,

Thank you very much for your reply. I want to be sure I understand you correctly. Is your advice that ISA will not do what it is that I am seeking, or that it will but only for someone with Administrator rights? Or that to your mind the only way it can be done is for an Administrator to go in and put people in and out of the internet users group manually?

 

[dput]

I believe my answer is option c. An Administrator go in and put people in and out of the internet users group.

We have certain users who are denied Internet access and we use the group concept for that. We don't normally have temporary exceptions.

Neat idea. If you find a way, I would love to hear about it.

Dan

 

[bschwarting]

What type of network switch do you have?

 

[schtek]

i have looked at this again..if you set up ure users that u wish to restrict into a group AD then select a rule in isa for access to the internet, before you appy the rule go back into coditions section on the rule it gives you a 24hr 7 day week section were u can select when this rule applies, and what time of day they are allowed to use the internet
hope this helps

"Ask not what your computer network can do for you - ask what you can do to the computer network to give you a quiet moment ."

 

[dput]

I think that the point is that one of these users will request authorization and receive it temporarily is the key point. I don't think granting that whole group access will meet the requirements as explained. There is not a problem with the group that gets unlimitted access. Only a problem with the users in the group that get access when approved. (the rest of the group does not get access at the same time)

At least that is what I am reading in the requirements.

Dan

 

[dearingkr]

I agree with dput.
I can't think of a way to do what you wnat with ISA.
There are some third-party solutions that may work.
Take a look at

http://www.verniernetworks.com

MCSE CCNA CCDA