Can SEP Network Access Control module be used to restrict internet access?

 As far as I remember SNAC allows you to load the restricted Firewall Policy when a condition meets. In which you can block the sites which you want :-)

Regards

Witold

I tried. The problem is, for e.g. I allow google.com but deny access to docs.google.com, but when the user accesses google.com, and is redirected to google.co.in, it should not allow, but the firewall allows the connection.

If I block docs.*.* it only block docs webpage and allows google and all other site.
If I block docs.google.*
it blocks only docs webpage and google.com /co.in opens 

Thanks. I will try and let you know.

Hi Jay,

Can you please update us on your issue..

Dear All,

I wanted to implemet SNAC but i have a question.

Suppose you came to my office and you wanted to connect to my network to browse internet & you want to print some document on my network printer.

Is it posibe In SNAC. So that user can only browse & pint on my network.

I dont want that he/she can browse my whole network.

How to Block that remote user to block my network but he can browse internet & print document on my printer.

Thanks In Advacne

Shri !!

With SNAC you can configure so that if the requirement fails clients can be either sent to Production VLAN where they will have access to everything or to Remediation VLAN where they will have access to only those things that you will allow.

So in your remediation VLAN you can configure so that the clients can connect to the internet and access your printer but cannot access other resources in the network...

And for these remote/ guest users there is one configuration called Agentless/Dissolvable  SNAC Configuration
read : https://www-secure.symantec.com/connect/forums/snac-agentless-configuration