The Browser Access policy gives you granular control over which users in your account can access the different Browser Access applications. The Browser Access policy isn't ordered, and all the rules are applied for the traffic.
After you create the Browser Access applications, create the access rules to allow the users to connect to them. For example, the screenshot below shows a rule that only allows the finance department to access the SAP database.
Create a new access rule for the Browser Access Portal and define the users that can access the specific applications in that rule. These are the users and groups you can define for a rule:
-
System Group and Group - Any system or manual group that you created in Assets > Groups
-
User - LDAP groups and users that are added to your account from an AD server in Access > Directory Services
-
SDP Users - Individual users that are connecting to the portal with the email address in Access > Users > <user name> > General
To create a new access rule for the Browser Access Portal:
-
From the navigation menu, click Access > Browser Access.
-
From the Access Policy tab or section, click New.
The Add Access Policy Rule panel opens.
-
In Rule Name, enter a name for the access rule.
-
Add the users and groups that can access the applications in this rule:
-
Expand the Users/Groups section.
-
From the drop-down menu, select the individual users or groups that can access the applications.
-
Repeat the previous step for additional users or groups for this rule.
-
-
Select one or more applications for this rule:
-
Expand Remote Access Applications.
-
In the drop-down menu, select the application.
-
Repeat the previous step for additional applications.
-
Click Apply.
-
-
The right-most column lets you enable or disable an SDP access rule.
When a rule is disabled, it is grayed out.
-
Click Save. The Browser Access rule is added to the access policy.
0 comments
Please sign in to leave a comment.