Application filtering by user or user group

[ouaipa]

Hi,

we are trying to set up an OpnSense server.

We would like to be able to filter the access to certain sites and applications (youtube, facebook, ....) by user.

With the Sensei plugin, either we block everything or everything goes.

Do you have an idea, another existing plugin?

Yours truly,

[hbc]

Sensei provides an AD agent which can do user <--> IP mapping. Different policies can be created with premium version.

For web traffic there exists proxy plugins:
os-web-proxy-sso          Kerberos authentication module   
os-web-proxy-useracl    Group and user ACL for the web proxy

In squid different policies are no problem, maybe you have to leave the gui way and edit the squid.conf.