Filtering Rules by User, Client, IP, MAC, and Gateway

By default, there are no filtering rules configured for a published resource, therefore it will be available to anyone who is connected to the Parallels Remote Application Server. Filtering allows you to control who can access a published resource. You can create several filtering rules based on any of the following filtering options:

• User
• Client (managed client)
• IP Address
• MAC Address
• Gateway

Once you specify a filtering rule, only those users/computers who satisfy the criteria can access the published resource.

To create a filtering rule, selecting a published resource in the Published Resources tree and click the Filtering tab. Define a rule based on a specific criteria as described below.

Filtering by User

To allow a user (or multiple users) or a user group to access the published resource:

1. Select User in the Search Filtering Type drop down list.
2. Select the Allow the following Users option.
3. In the Default Object Type drop-down list, select whether this rule will apply to users, groups, or both.
4. In the Browse Mode drop-down list, select the browsing mode you would like to use to connect to Active Directory or Windows.

   The options are:

   • WinNT . WinNT is faster than LDAP but does not support group nesting. Used only for backward compatibility.
   • LDAP. LDAP supports group nesting but is slow. Used only for backward compatibility.
   • Secure Identifier . This is the preferred and fastest method. It supports group nesting and renaming.
5. Click Tasks > Add and specify a user or a group in the Select Users dialog. Click OK to a user/group to the list on the Filtering tab page.

To convert users or groups specified using WinNT or LDAP, select the entry and then click Tasks > Convert .

Filtering by Client

To allow a specific client or a list or clients to access the published resource, follow these steps:

1. Select Client in the Search Filtering Type drop-down list.
2. Select the Allow the following Clients option.
3. Click Tasks > Add and select the client(s) in the Select Client dialog.
4. Click OK to add the clients to the list.

Filtering by IP Address

To allow a specific IP address (or multiple addresses) or a range of IP addresses to access the published resource, follow these steps:

1. In the Search Filtering Type drop-down list, select IP Address .
2. Select the Allow the following IPs option.
3. Click Tasks > Add in the IPv4 and/or IPv6 sections to specify the IP address or a range of IP addresses and click OK .

Filtering by MAC Address

To allow a MAC address or a specific list of MAC addresses to access the published resource, follow these steps:

1. In the Select Filtering Type drop-down list, select MAC .
2. Select the Allow the following  MACs option.
3. Click Tasks > Add to select the MAC address(es) and click OK .

Filtering by Gateway

To allow users to connect to a published resource through a specific gateway, follow these steps:

1. Select the Gateway filtering type.
2. Select the Allow connections from the following gateway option.
3. Click Tasks > Add to specify the gateway and its IP address (if it has multiple IP addresses).

Configuring Multiple Filtering Rules

If multiple filtering rules are configured for a specific published resource, the connecting user has to match ALL of them to be allowed access to the published resource.