How to blacklist any IP other than the ones (or range) I specify

Hi,
I am new to NAP and have just installed the role on our main server.
What I would like to achieve is that only device IPs I specify can use the network and access resources including the internet.
The result would be that any new device that comes into the building, be it a phone or laptop, can not join the network or use the internet without me assigning it a manual IP address and white listing said address.
How can I achieve this with NAP (or do I need something else)?
Thanks!

Hi,
Im not sure if you are referring to NAP (network access protection) or NPS (network policy server).
None of which will easily do what you want out the box though.
NAP performs health checks against client computers and depending on the health of the computer either grants or rejects access to the network. It can be enforced through various methods including DHCP restrictions, IPSec, VPN etc. Some are more secure than
others. Health checks include items such as the state of the AV, if the firewall is on, if Windows updates is on etc. 
NPS is basically a RADIUS server. This works in hand with NPS, but can also help you restrict access to networks following certain requirements. Generally this would be used to lock down WiFi networks, and works in tandem with your access points. 
If you just want to block access to non allowed IP addresses you have a few ways to do this. And it really depends on how full proof you want it, and your current network equipment. You could for example rely upon DHCP filters, and only allow IP's addresses
you have added to the allow filter in DHCP, any other IP you need to manually add. An other option would be to use the windows firewall, and an proxy / web filter device. The disadvantage of these is someone could give them selves a static IP address matching
one that you have allowed and that would work. Another option would be to use MAC and IP ACL's on your routers, switches and firewalls if they support it. 
There are other options too, it really depends on your setup, your budget, and how restricted you really need it. 
Thanks
Denis
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
Blog: http://www.windows-support.co.uk 
Twitter:   LinkedIn:

Similar Messages

  • HT2688 Having updated to iOS7, I am unable to upload a video to shared stream but when I do, it won't play on any device other than the one used to upload ... help

    Having updated to iOS7, I am unable to upload a video to shared stream but when I do, it won't play on any device other than the one used to upload ... help please

    I also have this problem, as does everybody else I know who has tried to use the video in icloud. As the original poster says, they can be uploaded, but will only play on the device from which they were originally uploaded, appeaering only as images which display an endless buffering symbol when "played" on any other devices with which the photostream is shared.
    Has anyone been able to get this to work? And if not, why is there no acknowledgement from Apple that this bug exists and will be addressed in an update (now running 7.0.2 and still no improvement)? It was, after all, advertised as one of the attractive new features of iOS 7. So why the stony silence?

  • TS3297 iTunes puts up a message "The item you've requested is not currently available in the Hong Kong Store." I had not requested anything from the HK store at that point, and I have never used any store other than the HK one. How I can clear that messag

    I've been running iTunes on WinXP for years with few problems.  I have all my iTunes files on an external USB drive. I just bought a new PC running Win7, 64-bit.
    I connected the external USB drive to the new PC and installed 64-bit iTunes on it. When iTunes started up, I pointed it at the iTunes directory in the external drive, using Edit > Preferences > Advanced > iTunes Media Folder Location. It showed a progress bar that it was updating the iTunes Library. I signed in and authorized the new machine. I have one spare authorization.
    Then iTunes put up a message "The item you've requested is not currently available in the Hong Kong Store." I had not requested anything from the HK store at that point, and I have never used any store other than the HK one.
    When I click OK, the iTunes Store page remains blank, apart from saying "iTunes Store" in the middle of the page.
    I went to "View My Account" and pressed the Reset button to "Reset all warnings for buying and downloading items", but that doesn’t fix this particular warning. I also tried Edit > Preferences > Advanced > Reset Warnings and Rest Cache.
    But still, every time I click the “App Store” button in the iTunes Store window, the message appears. If I click the Books, Podcasts or iTunesU buttons, these display normally.  So I’m stuck with being unable to purchase apps, other than through my iPad and iPhone.
    If I move the external drive back to the XP machine, the same thing happens.  If I go to another PC - a notebook running Vista - everything is normal.
    Any idea how I can clear that message?
    Thanks for any help you can offer.

    Further info on my question above.
    I have tried re-validating my credit card, which apparently fixed it for some. 
    I have also tried uninstalling, re-downloading and installing again.
    Neither of these steps fixed the problem.

  • HT4550 My bar on my safari is gone, as in i can't go on any website other than the apple store

    My bar on my safari is gone, as in i can't go on any website other than the apple store. how do i get the google bar back!!!

    View > Show Toolbar

  • On and iPad how to Allow User To Enter Custom Text  (Dropdown only) Enables users to enter a value other than the ones in the list.

    On an iPad, how do I :
    Allow User To Enter Custom Text
    (Dropdown only) Enables users to enter a value other than the ones in the list.'?

    Are you using the built-in Currency option under the Format tab? If so,
    what you're describing should not happen.

  • IPhone 4S wifi is gray and will not find any networks or move. I have hard reset network reset and safari reset. All other devices in my house connect to wifi. Any suggestions other than the 3 that do not work.

    iPhone 4S wifi is gray and will not find any networks or move. I have hard reset network reset and safari reset. All other devices in my house connect to wifi. Any suggestions other than the 3 that do not work.

    iPhone 4S wifi is gray and will not find any networks or move. I have hard reset network reset and safari reset. All other devices in my house connect to wifi. Any suggestions other than the 3 that do not work.

  • MacBook Pro freezes when using any app other than the web browser.

    My MacBook freezes when using any app other than the web browser. I can open up Google Chrome and use it all day with no problem, but if I minimize it and try to browse through photos in my picture folder or do anything that involves the Finder, the computer just freezes up and I get the rainbow wheel. If I put in a CD to play it, the computer freezes with the rainbow wheel. Any suggestions? I would like to use the mac for more things than the internet.

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, or by corruption of certain system caches. 
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and  Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

  • Does any iPod model (or has any ever) other than the iPod Touch support iCloud or wifi syncing?

    Does any iPod model (or has any ever) other than the iPod Touch support iCloud or wifi syncing?  Thanks.

    No, the Touch is it.

  • Mail with multiple gmail accounts sending messages from wrong email, other than the one i select

    mail with multiple gmail accounts sending messages from wrong email, other than the one i select:
    i'm using mail on osx 10.7 with multiple gmail accounts. when i create an email, i check to be sure i'm sending/replying from the correct account. after i send it, somehow it actually sends it from a different account, other than the one i've selected "from." this is evidenced by the reply email i receive. how can i fix this?
    in preferences, i have "send new messages from : account of selected mailbox"

    From the Mail menu bar, select
              Mail ▹ Preferences...
    The Mail preference dialog opens. Select the Composing tab from the row of icons at the top. From the menu labeled
              Send new messages from:
    choose
              Account of selected mailbox
    Note that this setting may have no effect if you start a new message while a VIP or smart mailbox is selected in the mailbox list. Those are saved searches, not actual mailboxes.
    If the problem remains, select the Accounts tab in the preference dialog, then select the affected account in the list on the left.
    In the Account Information pane, select the correct server in the menu labeled
              Outgoing Mail Server (SMTP)
    If there's only one server in the menu, select
              Edit SMTP Server List...
    and add a new server with the correct settings. If you're not sure how to do that, try the Mail Settings Lookup.
    Another possibility is that the wrong card in your address book is selected as yours. Select your card in the Contacts application. Then select
              Card ▹ Make This My Card
    from the menu bar.

  • Can I use a different charger for my iPhone other than the one that was supplied for it

    Can I use a different wall charger for my iPhone 4S other than the one that was supplied with it

    wjosten wrote:
    Lawrence Finch wrote:
    Apple puts no special requirements on it other than that it meet the USB spec.
    Except for the connector...
    What is special about the connector for the 4s charger cable? Mine is a normal USB connector. The question was about the wall charger, not the connector to the phone.

  • My ipod is telling me to plug it into itunes but when i did that it said i needed to type in my passcode on my ipod to do anything, but i cant go to any screen other then the one it is showing me

    My ipod(ipod touch 3rd generation) is telling me to plug it into itunes but when i did that my computer said i needed to type my passcode into my ipod before i could do anything, but i cant go to any screen other then the one it is showing me (the one saying to plug it into itunes), i tried turning it off and then back on and it didnt do anything! also i just downloaded itunes to this computer so it doesn't have any music or anything on it that is on my ipod so i cant just wipe out my ipod. please help me! i use my ipod for everything!!!

    it is telling me to plug it into iTunes and when I dont iTunes tells me to put in my passcode
    That makes no sense. Are you plugging it into iTunes or not?
    ...phone still tells my to connect it to iTunes and even if I knew my passcode I still couldn't type it in.
    If you even knew your passcode why couldn't you type it in?
    Please try again: tell us the problem, what you try, and what the result is.

  • How to upgrade to something other than the most recent OS

    I am currently running Os 10.6.8. I would like to update, but I have a critical application that is only qualified for 10.8.2 and the current operating system is 10.8.4. Is there a way to buy something other than the current OS?

    Apple updates the OS X installer at the Mac App Store with the latest version, and older OS X versions disappear. If you want to upgrade to Mountain Lion and you purchase Mountain Lion at the App Store, you will get the OS X Mountain Lion installer with 10.8.4 installed, so it will install 10.8.4, without any possibility to install 10.8.2.
    You can try changing system files to look like you are using 10.8.1 and try applying the 10.8.2 update, but doing this you may damage OS X Mountain Lion

  • MacPro wont boot from any disk other than the main HD

    Hi all,
    I want to startup my MacPro from a different drive other than the main (original) Macintosh HD, so I can do maintenance and for emergencies.
    However, I cannot startup from a DVD. Not DiskWarrior, or even the retail Snow Leopard disk.
    I attempted to install the OS on another internal drive, but the intallation seemed to fail (the disk I tried to install onto was Mac OS Extended, Case-sensitive, Journaled, but there were no complaints from the installer.)
    So even though my computer runs OK, and I can continue doing work etc, I am unable to do the maintenance that I believe it needs.
    I have tried to:
    • Run the updated DiskWarrior DVD
    • Run the SL instal DVD
    • Taken all the extra wires/drives out of the back of the computer
    • Attempted to install the OS onto a second internal drive
    I have not:
    • Zapped the PRAM yet.
    • Run the computer in target disk mode and worked on it from my MacBook
    • Run the MacBook in target mode to use its DVD drive.
    This problem has come up before on this machine. I can't remember what the problem was, other than I used to run the MacPro on its side. No longer. Not for the last few months.
    Anybody come across this before? Any ideas?
    Thanks,
    Aaron

    You could use CCC to do a trimmed down clone and leave out most of the sub folders. Do a 2nd clone to have a full working copy.
    Carbon Copy Cloner 3.4.2
    Cloning as a Backup Strategy
    My guess is one of your drives needs to be reinitialized. Only during format will the hidden partition blocks be tested, and of course a healthy set of partitions created, things that cannot be repaired normally - though Lion Recovery partition does have abilty to check the health of partition tables. And about the only reason I'd even buy Lion!
    Check partition table health in Lion's Disk Utility
    Manage all partitions with Disk Utility in OS X

  • I want to edge to a phone other than the one that I am "eligible" for

    I am very frustrated with the service that I have received lately. I currently own an iPhone 5 and have an upgrade in July. The phone works fine other than the short battery life and little storage left due to the fact that the new software updates get larger as they go. I became eligible for early edge at the beginning of February. When I went to take a look at my options I was told that I would only be able to edge to a droid max. I have had iPhone's since 2010 when I first got a smart phone, my entire platform runs off of Apple and I have absolutely no desire to change that now.
    I called customer service to see if anything could be done to change this option and was told that she could not do anything at the moment, but if I called back in the middle of March that I would be able to get an iPhone 6 and that she would notate my account saying just that. I waited like she told me and called back yesterday. I was then told that my account was notated "if she calls back in a COUPLE OF MONTHS that she will be able to get an iPhone 6." I'm sorry, but there is a big difference between a couple of weeks and a couple of months, especially considering that in a couple of months I will be able to upgrade my phone anyway which would mean there would have been no point in calling back if that's what I had been told originally. Why would I be told one thing and be specifically told when to call back, and then have her write down something else completely? It is very frustrating to be told one thing and then to essentially be told that I am incorrect because something else was written down. I have been a Verizon customer since 2007 and stayed with Verizon even when I moved to my own plan in 2013 and the fact that I am being given the run around is extremely frustrating and annoying. I am very dissatisfied with the service that I have received and with the fact that this is my fourth time dealing with the same topic.

    Yes, you got the phone which was currently eligible for Early Edge at the time. This changes from time to time. When the iPhone 6/6+ was first released those were the ONLY phones you could purchase on Early Edge. This was for September and October of 2014. You would not have been able to purchase any other phone with Early Edge at the time. At the time, this made a lot of android phone owners angry, just as it is making the OP(an iPhone owner) angry now. Then it was the Droid Turbo ONLY, then it was....
    One of the requisites AS LISTED ON THE EDGE PAGE is that your line must be eligible for an upgrade. Verizon lifts this requirement IF you want to purchase a specific phone. If the phone you want is not eligible for Early Edge at this moment, it may be at some point in the future and the phone CURRENTLY available may NOT be available for Early Edge. You were able to get the phone you wanted on Early Edge because it was the phone(or one of the phones) eligible at the time for Early Edge.
    Verizon does not have a link for Early Edge because it is not always available AND the eligible phones change from time to time. This is no different than any other special they occasionally run.
    Regardless, since a link WAS given for Edge which DOES list upgrade eligibility as being a requirement, if someone DOES NOT fulfill that requirement it is not out of the question that other portions of Edge may be different, too, such as what you posted "All Verizon Wireless smartphones, tablets and basic phones are eligible for Verizon Edge." If Verizon relaxes a requirement to enter into Edge, why is it so hard to fathom they may ALSO change something else such as which phones are eligible???
    The fact that the OP IS NOT able to purchase an iPhone on Early Edge simply reinforces this fact.

  • How do i purchase music from a country other than the one i'm in

    i live in the usa and i want to purchase music form the greese itunes store. I don't have a credit card registered in greece. Is it possible to purchase and download from a different country? How do I do it? or how do i contact apple to ask this specific question/
    thanks

    This question is asked frequently so I'll just quote the most succinct answer (courtesy of Dave Sawyer) from the many given:
    In order to buy from any given country's iTunes Music Store, you must have either:
    a) a credit card with a billing address in that country, or
    b) a mailing address in that country and a gift certificate or a prepaid card that was bought in that country.
    If you cannot fulfill one of these two sets of conditions, you will not be able to purchase from any given country's iTMS.
    .......this is due to restrictions placed on Apple by the record companies and other rights holders (who are often completely different from country to country and so all require their own individual negotiations and contracts), not by Apple's choice. And this also applies to all the legal download stores that carry major-label content, not just the iTMS.

Maybe you are looking for