Re: NuFW and multiuser hosts

[Pierre Chifflier <chifflier () cpe fr>]

ArkanoiD wrote:
> There is a firewall, NuFW, which primary feature is to differentiate
> users in multiuser hosts networking environment.
>
> Do you find it useful? Acutally use it? Or ever seen someone who does?

Hi,

NuFW works fine in multi-user environment (ssh, citrix, etc.). You need
to install a client, and every user need to authenticate to a server
(nuauth), generally connected to a LDAP or AD server, and some other
authentication methods are supported: all methods supported by pam (sql,
etc.), certificates, ...
Administration of the firewall is done using a web interface.
(http://demo.edenwall.com)

A very interesting feature is that it allows you to define filtering
rules based on person/groups, not on IP addresses. The rules are applied
  for the user, regardless of the workstation (you can still define
filtering rules based on IP if you want), and if several users are
connected, rules are different for each user.

NuFW is available as an appliance, named edenwall. See
http://www.edenwall.com/EdenWall-Typical-uses.html for example.

NuFW is opensource, and free. The only exception is the windows client,
which has a commercial license . So if you use an opensource
environment, everything is free.

links:
http://www.inl.fr/NuWINc,68.html

Regards,
Pierre
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards