how to prevent data transfer from domain pc to non-domain pc with fixed ip-address

Question

I have a windows domain that is not connected to the internet.

I'm now using ipsec isolation with "Require authentication for inbound and request authentication for outbound connections" and "Computer and user (Kerberos V5)" authentication to prevent non-domain pc's from accessing the domain servers.

How can I prevent data transfers from a domain pc to a non-domain that uses a fixed not-used ip-address?

I tried "Require authentication for inbound and outbound connections" but then my domain pc's cannot access other computers on the domain anymore.

Answer 1

Hi,

Since the computers use fixed IP addresses, you can create an inbound firewall rule on the domain computers to accept connections only from a pre-defined IP address range that contains only the domain computers.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.