Firewall rules per user group

[random1104]

Hello!,

Anybody ever tried to implement firewall rules per user group?. Defining rules just per machine IP is not practical for a large office installed base.

I was wondering if it could be implemented, for example, processing any user authentication service logs and mapping user to group to IP and modifying aliases to make permissions apply to the IP matched to the user.

If the alias member maximum is not too low, it could scale the addition to the list. On the other side, clean up could be an issue

Thoughts?