Re: Restricting web site access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Gary D wrote:

Anybody any idea how to bar/allow access to certain websites/domains
SBS2003. I have tried via destination sets, client address sets and site
content rules. I cant find the info on the Microsoft web Site.

Regards and thanks in advance


You would use Destination Sets to build a list of sites for which you wish to control access, and then you'd use Site&Content Rules to specify the access for those Destination Sets.

Note that Deny rules "beat" Allow rules.

If you want to only allow access to a small set of sites, the first step would be to remove the general S&C rule that allows access to all sites. Then create an S&C Allow Rule for a Destination Set that only holds your wanted sites.

If you want to just deny access to a small set of sites, build a Destination Set for all the banned sites, then create an S&C Rule to Deny access to that Destination Set.

Once you've done building the Rules, you need to restart the ISA services if you want the rules to have immediate effect. Otherwise, they'll be implemented the next time that ISA refreshes itself (normally only a few minutes, but does depend on how busy ISA is).

Steve Foster [SBS MVP]
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • Re: access only to one external site
    ... In the same page that contains the checkbox above, make sure that ISA ... Microsoft Firewall service and Microsoft Web Proxy service are started. ... On a test client, login using the test user account, make sure that IE ... destination set, he should access them normally, any other sites should ...
  • Re: Restrict access to particular web sites
    ... Javier [SBS MVP] ... > they can only access a few specific web sites, ... > Would this be a manageable task for ISA? ... would the destination set have to include every possible link they ...
  • Re: Limited Internet Access for a Group of users
    ... If ISA in SBS works like the regular ISA server product then all you should ... Create a destination set that contains the web sites the group is allowed ...
  • isa 2000/2004 destination set
    ... I have been using isa 2000 for years and have cleared a lot of problems. ... an isa server the connection takes an extremely long time ... I have tried all combinations if isa's clients. ... destination set is, ...
  • Re: access only to one external site
    ... Authentication in addition to Integrated Authentication ... >> service, this will restart all ISA services, and the restart make sure ... >> is using the ISA server as a proxy. ... >> destination set, he should access them normally, any other sites should ...