If a server is under firewall how to restrict users to access some sites in firewall. Because users are getting logged in through server AD?

access list should be used in your firewall. if you want to simplify your administration job to restrict site by name, you can use proxy server such ISA server or other restricted sites software program.

cyberoam should have content filter policy, configure the AD integration on the firewall and configure the web filter policy on the firewall based on AD groups (i recommend group based policy) , and also you can enable SSO,depends on the company's requirements.

check below links for more details:

Single Sign On Authentication:

https://kb.cyberoam.com/default.asp?id=1637.

Integrate Cyberoam with Active Directory:

https://kb.cyberoam.com/default.asp?id=1637

 If it is a Hardware firewall , we have an option to linking with active directory service for controlling users for External access , That is the best method we can easily administrate enter users , to use there internet usage and web filter ..etc 

Hi,

It is very simple. We need to create one LAN to WAN rule in the firewall as per the host address of the nodes. So this way we can simply restrict the internet access or file access of the users. If the server need to get full access (without any obstacles), that also we can assign in LAN to WAN policy rules and WAN to LAN policy rule. In this scenario the primary gateway must be the firewall device.

Thank you for your query.

Best Regards,

FAISAL CHANDRATHIL ABDUKUNJU

https://www.facebook.com/faisalabdukunju

you need to control by internal firewall or external firewall by make a good policy to restrict users to access to the internet web pages by closing the ports by the name for the web site or by service protocol options like (DNS, HTTP, HTTPS, FTP, FTPS, POP3, POP3S, SMTP, MS-Share, IM, NNTP, IMAPS)