Re: functionality to prevent users from logging onto a central (CI) type server?

1. Cant we use web dispatcher here and remove the CI from load balancing ?

and Not sure if option 2 can be applicable in your case. Perhaps depends on version you are using.

2. Separate your CI from PAS

Regards,

Pavan Gunda