Untangle Policy Manager

Overview:

Policy Manager enables administrators to fine tune network privileges. Policy Manager's intuitive GUI and "virtual rack" metaphor makes it easy for administrators to:

• Create network access policies by username
• Create network access policies by time or day of the week
• Assign permission to users for applications such as instant messenger, gaming, and video streaming.
• More easily manage and automate multiple Internet usage policies across organizations
• Automated sessions within Policy Manager allow organizations to “time-out” certain policy changes, for example allowing IM or Facebook access only during lunch hours

Policy Manager is for administrators with complex networks where one size doesn't fit all. Many organizations need to provide unique privileges to different sets of users like schools (teachers vs. students), libraries (librarians vs. public Internet terminals) or businesses with different departmental requirements (engineering vs. sales.) Policy Manager even makes it possible to block access to common productivity-killing websites like Myspace or Facebook during working hours, but keep it available during lunch and after hours.

Policy Manager FAQs:

Can I use my existing Active Directory group to

No. However, Untangle is evaluating this approach to policy management. The Untangle Server enables you to create policies based on criteria such as AD users, IP addresses, subnets, and more. Many of our customers feel that the easiest way to create policies by groups is to create an IP address range for each AD group, then assign policies based on IP address ranges. If you need help, call us and we'll walk you through the steps. Of course, you can also create multiple racks.

When should I create a virtual rack?

Create a virtual rack when you want to apply different rules to different users.

Why can't I add/remove entries from the Default Policies tab?

Default Policies ensure that all possible types of traffic are handled by the Virtual Racks.

If you were allowed to delete a Default Policy and you did not add a Custom Policy that is the equivalent of the Default Policy that you deleted, the Untangle Server would be unable to handle some types of traffic.

I'm using the Untangle Server's OpenVPN. Do I need to create extra virtual racks/policies for the VPN users?

You do not have to create extra virtual racks/policies to use VPN. The VPN interface is, by default, inside the external and DMZ interfaces, but outside of the internal interface. The single Default Rack is sufficient for most deployments.

One case where you would need to create extra virtual racks/policies is when not all VPN users are equal and you want to apply different rules to different VPN users. If all VPN users are equal, have the policies dealing with the VPN interface route traffic to the Default Rack.

I only want to scan inbound email traffic, not outbound. Do I need to create a new virtual rack and policies?

No. Many Software Appliances (including all of those which scan email) let you directly configure behaviors for inbound vs. outbound traffic.

I created a new custom policy. Now it's not there. Why?

Custom policies are a feature of the Professional Package, and are not available in the Open Source Package.

Why is outbound port 25 treated differently?

Because most companies don't want to scan outbound email there is a default policy rule that sends outbound port 25 traffic to the ">No rack." This means that Spam Blocker, Phish Blocker, and all the mail scanning apps scan all SMTP (port 25) traffic except outbound.

Media:

 

Hardware Requirements:

• The Untangle Server requires a dedicated PC installed at the gateway to your network.
• Your hardware does not need an operating system - the Untangle Server installs its own operating system.
• The Untangle Server software completely erases any content or data that may exist on your PC hard drive.

Sizing Guidance

Recommended Configurations (New Hardware)

When purchasing new hardware, spending a couple of extra dollars to meet the following recommended configurations provides the best value.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	Pentium 4 equivalent or greater	Dual Core	Dual Core
Memory	1 GB	1 GB	2 GB
Hard Drive	80 GB	80 GB	80 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)

Verified Configurations (Trials, Refurbished or

These are the lowest verified hardware configurations that provide reliable — albeit sometimes slower — performance in production. However, it may be possible for organizations with lower than average network traffic or organizations that do not wish to use all of the modules to run Untangle on smaller systems.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	800 MHz	1.2 GHz	1.6 GHz
Memory	512 MB	1 GB	2 GB
Hard Drive	20 GB	30 GB	40 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)