Skip to main content

Change internet access for User Groups, Networks, and Hosts

Abstract

Internet access for User Groups, Networks, and Hosts can be configured from a central place under Access > Internet.

The Internet Access section allows you to view, filter, search, and edit the route internet traffic takes for User Groups, Networks, and Hosts in one central place.

The Internet Access setting allows you to either completely restrict internet access, tunnel all internet traffic to CloudConnexa, or let the internet traffic exit directly to the internet for a given User Group, Network, or Hosts.

Note

Any internet destinations (domain names or IP subnets) configured as Applications or IP Services are considered 'trusted internet traffic' and will always be tunneled to CloudConnexa instead of treated as regular internet traffic.

Internet Access for User Groups, Networks, or Hosts can be set as:

  • Split Tunnel On (Level-1 Security): Private and trusted internet traffic is tunneled; all other internet traffic uses local internet.

  • Split Tunnel Off (Level-2 Security): All traffic is tunneled; Internet traffic exits from selected Internet Gateways

  • Restricted Internet (Level-3 Security): Private and trusted internet traffic is tunneled; all other internet traffic is blocked.

Refer to Tutorial: Learn About the Levels of Security Afforded by the Use of Various Internet Access Options, for more information on the security levels. When Split Tunnel is OFF, all internet traffic arrives at the WPC. The WPC needs a connected network to act as an Internet Gateway. The Network set as an Internet Gateway indicates to the WPC that traffic destined for the Internet can be routed to that network. Refer to Make a Network act as an Internet Gateway.

The Internet Access setting can be configured directly on individual User Groups, Hosts, and Networks. Still, the Access > Internet section allows you to view, filter, search, and change the Internet access settings of all User Groups, Networks, and Hosts in one central place. To change the internet access settings from this central place, follow the steps below:

  2. Navigate to Access > Internet.

  3. Based on the entity whose internet access needs to be changed, select one of the three tabs: User Groups, Networks, or Hosts.

  4. Use the filters or search to help narrow down the displayed list.

  5. Click on the edit (pencil) pencil_icon.pngicon next to the entry that needs to be changed.

  6. Select the required setting from the Internet Access drop-down menu.

    Note

    'All Internet Gateways' will be chosen by default as Internet Gateway when 'Split Tunnel Off' is selected.

  7. Click Update Internet Access.

Tutorial showing how to change internet access settings

In this section: