OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: ouaipa on November 25, 2019, 07:49:10 am

Title: Application filtering by user or user group
Post by: ouaipa on November 25, 2019, 07:49:10 am
Hi,

we are trying to set up an OpnSense server.

We would like to be able to filter the access to certain sites and applications (youtube, facebook, ....) by user.

With the Sensei plugin, either we block everything or everything goes.

Do you have an idea, another existing plugin?

Yours truly,
Title: Re: Application filtering by user or user group
Post by: hbc on November 25, 2019, 10:22:44 am
Sensei provides an AD agent which can do user <--> IP mapping. Different policies can be created with premium version.

For web traffic there exists proxy plugins:
os-web-proxy-sso          Kerberos authentication module   
os-web-proxy-useracl    Group and user ACL for the web proxy

In squid different policies are no problem, maybe you have to leave the gui way and edit the squid.conf.