Blocking Users and Applications
Blocking users and applications requires policy rules to be edited. You can view policy changes by clicking the policy name or view affected devices by clicking the device count. You see only policies permitting this traffic in the past 30 days.
Starting in Junos Space Security Director Release 21.1, when unified policy rules permit the traffic, selecting block action creates block rules in the appropriate unified policy.
To block a user:
- Select Monitor > Users.
The User Visibility page appears.
- In Chart view, hover over the required user.
The user page appears with information on the bandwidth, number of sessions, top five applications, view all applications link, and options to block users and applications.
Note You see the number of sessions as links. When you click a link, the All Events page appears and displays the events that generated those sessions.
Click the View All Applications link to display the Application Visibility page in Grid view with correct filter applied.
Note In Grid view, select the IP address or user name and click Block User.
The Block page appears with the username and top five applications.
- Click Block User to block the selected IP address
or username from accessing all applications.
The Block User page appears with policies that contain the rules required to block the user. The listed policies will be edited to block the selected user from accessing all applications.
- Click a policy to preview the policy details.
Starting in Junos Space Security Director Release 16.1, you can preview the policy details. The Policy Changes Preview page appears with information on number of rules added, modified, and deleted. You can preview the policy details. You can attach or add a schedule under the Rule options column.
- Click OK.
- Click Save to save your changes.
- Click Publish to publish your policies.
- Click Update to update your policies on devices.
To block an application:
- Select Monitor > Users.
The User Visibility page appears.
- In Chart view, hover over the required user. The user
page appears showing information about the bandwidth, number of sessions,
top five applications, view all applications link, and options to
block user and application.
Note You see the number of sessions as links. When you click a link, the All Events page appears and displays the events that generated those sessions.
Click the View All Applications link to display the Application Visibility page in Grid view with the correct filter applied.
Note In Grid view, select the username and click Block User.
The block page appears with the username and the top five applications.
- Select an application you want to block and click Block Application(s).
The Block Application page appears with policies that contain the rules required to block the user from accessing a particular application.
- Click a policy to preview the policy changes.
The Policy Changes Preview page appears with information on number of rules added, modified, and deleted. You can preview the policy details. You can attach or add a schedule under the Rule options column.
- Click OK.
- Click Save to save your changes.
- Click Publish to publish your policies.
- Click Update to update your policies on devices.