(First of all I mean, this entry only based on access to the site the IMSS in Mexico that many headaches can give a policy-based network and proxy for restrictions.)
Raise a network based on security policies is relatively simple windows, including clients in a proxy filter is a regular job, to enter the site the IMSS with it all together traumante may come back. In Mexico, many applications and Web access are not minimally designed for corporate environments, ie, assume that none of the clients working under a domain and restriction policies and is as if the whole time they were at home. As an example, working with nomipaq can be a nightmare, as they must make changes to the registry to work (at least the version I was so occupied) the famous SUA, other applications needed, stupid in its operation but necessary in this case the page of the IMSS. But let my traumas Computer and go to the topic
IMSS
The page works with java, as you know sometimes they do not get along with the proxies, then we must allow to have a "direct connection" to the Internet. What we have to do is:
1 .- If the client has a fixed IP address, change it to get the address by DHCP (assuming the DHCP outputs Internet Direct) this way, the gateway to the router and change will get pure communication. 2 .-
CCProxy have to get the MAC address of the computer and the ip address will be changing with some regularity, which would produce would come out of the Allowed List, preventing access to the Internet (depending on your configuration) . In another post I explained how to get the MAC address
This serious about configuration "after." Now for the changes that will allow access to the site
1 .- User: If you are an obvious standard will have restrictions, may not enter the control panel for example, then we will have to change the container to administrators show these elements and java to access the control (managers have a container, right?
2 .- Download the latest version of java. put download java in google and the first result that comes out is the official website of java with his version latest. You can install it from the admin or the user allowing a user to run as admin
3 .- Within the site the IMSS, is a part that says "access to any version of java" must download and install also this
4 .- Go to the Control Panel, the java options in connection activate the option "direct connection" we apply and accept
At this point we entered the site the IMSS and you should be able to access. recommend completely remove all previous versions of java, and that if they create conflict. The tests I've done if they work with only the most recent version, do not need anything before. In case you did not notice, there was some modification to the proxy tab in Internet Explorer because it is not necessary. The proxy will continue filtering the navigation of the user without problems and at the same time you can enter the site so hated. Yes, what they think, "but now is the gateway proxy, will be able to do what he wants." Nothing happens. If you are a creative admin will know that things must be closed so that the user can not "sneak" using the new type of connection, that's why I recommend from the domain policies do not allow access to the page explorer internet connection, as it could remove the values \u200b\u200band have direct access and because many programs are based on the configuration of this, they could leave without problems. Now if the user can install programs because you already have a management problem.
note:
I have found that users with administrative privileges on a Windows 2003 domain being in dhcp and this will output to a router (2wire for example) tend to "tune" the domain, you will notice this if you try to access to a PC with a shared folder and prompts you to enter password, things like that. This will not occur if the user is a common domain and can not do DNS changes automatically so
0 comments:
Post a Comment