>Subject: Re: Dynamic firewall
>From: T. Jay Humphries, tjay @
> we want
>to close all Internet access off and dynamically allow authorized access to
>only the students we have authenticated.
>When a student logs into the lab network we validate them from our student
>database, record session times (start and finish), who they are, the MAC
>address of the workstation and the IP address assigned to them for that
>session. After the student has been authenticated we would like to take that
>information and dynamically configure the firewall to allow Internet
>that student during that session.
I think most Proxie type Firewalls provide for User based access controls
- before being allowed use of the proxies, the student would be required
to authenticate at the firewall. Only students with IDs on the firewall
would be allowed use.