Fortgeschritten: Multiprofile und Multipolitik

Multiprofile enables several profiles to be enabled and associated with a single network, so that different filtering rules can be used on the same public IP. The filter provides 5 pairs of DNS addresses, each pair can be associated with a different profile:

Primary Secondary 185.236.104.104 - 185.236.105.105 185.236.104.114 - 185.236.105.115 185.236.104.124 - 185.236.105.125 185.236.104.134 - 185.236.105.135 185.236.104.144 - 185.236.105.145

To better understand how it works, let us proceed with an example; in this case we want to define the following 2 profiles for a single Client with the same public IP: » Default (Primary DNS: 185.236.104.104; secondary: 185.236.105.105): profile used by employees (with social network category locked). » Executive (Primary DNS: 185.236.104.114; secondary: 185.236.105.115): profile used by management (with social network category unlocked).

First you need to access the management panel by entering your credentials; using the [Profile] tab at the top of the dashboard, we can configure the default profile. If you want to change the name you can do so by clicking on the pencil icon related to it and choosing a new name. » Finally clicking on [Edit] to apply the changes.

After that we will go on to create a second profile (Executive) similar to the previous one, and we will go and choose DNS 185.236.104.114 - 185.236.105.115. To do this, the following steps must be followed: » Click on the [Profile] tab. » Click on the [Create New Profile] item next to the + icon and fill in the following fields: » Name : Choose a name for the profile. In our case it will be Management . » Time Zone : Choose the time zone that will be used for Flashstart Cloud functions. » Mode : Choose from: » Normal: Blocks only the chosen categories and blacklisted domains. » Restricted : Blocks everything except whitelisted domains. » DNS : Choose a diffrent DNS pair from the drop-down menu. In this example it will be 185.236.104.114 - 185.236.105.115. » Networks : Check the email/username or public IP address that you want to associate with DNS 185.236.104.114 - 185.236.105.115. NOTE: If no network has been added yet, this field will not be present. You can associate the address later, after you have created at least one network. » Finally click [Insert] to create the new profile.



If everything has been done correctly you will get a result similar to the following image:

At this point you can configure the various filtering rules, in our case we will block the social network category to the Default profile and unblock it to the Executives profile. This way, requests to DNS 185.236.104.114 - 185.236.105.115 will respond to a different configuration than the Default DNS.

At this point to use the profiles you have just created you will need to configure your network. To do this there are two possible options: » manually change device DNS based on which profile you want to use on that pc. » Create redirection rules based on the originating IP. This is only possible if there are routers or firewalls that allow it (e.g., Mikrotik). Related articles: Mikrotik: How do I configure multiprofile?



Other ways to ask: » How to manage multiprofiles and multipolicies. » Managing multiprofiles and multipolicies. How to.