Rules with AD users

[sp_david]

Hi All,
i'm a newbie on pfsense and i'm trying to figure out how to create firewall rules to filter traffic based on AD users.
I have 3 different AD domains and i want to have only one proxy server to filter Internet traffic on them.

Any suggestions is appreciated.

Thanks

David

[muswellhillbilly]

You can't filter firewall traffic using AD policies, but you can selectively filter web traffic (http/https) via Squid proxy using AD group membership, if that's what you're after.

[sp_david]

thanks for your quick reply muswellhillbilly. Yes that's exactly what i want.
Filter traffic in our environment based on AD users/groups

Thank you again

[muswellhillbilly]

There are any number of howto's on this topic, but here's one to be getting on with:

https://www.howtoforge.com/debian-squeeze-squid-kerberos-ldap-authentication-active-directory-integration-and-cyfin-reporter

From what I understand, it's possible to set AD authentication using Squid/Squidguard on the PFS directly, though I haven't done this myself. If you have a look at the packages involved they ought to be self-explanatory, though there are similar posts to these elsewhere on the forum.