Questions

Website content filtering software

+
0 Votes
Locked

Website content filtering software

LogicNetworksLLC
Hello,

I am trying to help a client look for a desktop application that can stop employees from accessing social sites such as "Facebook" "Reddit" etc... The approved software must address the following:

1.) Work with both Firefox and I.E.
2.) Allow for Https: pass-through for internal servers - not just www. sites
3.) They only want to lock down specific workstations not the whole environment.
4.) Allow corporate approved proxy only

Thoughts???
  • +
    0 Votes
    robo_dev

    Software on individual PCs is difficult to configure, easy to bypass, and likely to cause more problems than it solves. There are apps like NetNanny or K9 Web protection from BlueCoat. Royal pain to configure, will break half the user web sites, require hours of tech support.

    The best solution is to deploy a content-filtering proxy server (WebSense) and then use Windows group policy to control who has to use the proxy and who does not. Simple centrally managed solution.

    +
    0 Votes
    JPElectron

    For computer's that you own you should prevent user's from making changes to the NIC and browser configurations, this can usually be done via AD Group Policy and/or by taking away admin rights from the end-use.

    For filtering I would suggest DNS Redirector http://dnsredirector.com/ it installs on a server and then any client device on the network can benefit. Some user's can bypass the block with a password (or AD login), by being given a DHCP reservation, or at logon (via login script)

    +
    0 Votes
    Clendanielc

    I would look at Smoothwall. All you will need is an extra PC with two NIC cards in it. It will do a little more than what you are asking but that's for room to grow. The express version is free and worth it. The paid portion I never used but I have setup Smoothwall in a couple small organizations and had no problems with it so far.

  • +
    0 Votes
    robo_dev

    Software on individual PCs is difficult to configure, easy to bypass, and likely to cause more problems than it solves. There are apps like NetNanny or K9 Web protection from BlueCoat. Royal pain to configure, will break half the user web sites, require hours of tech support.

    The best solution is to deploy a content-filtering proxy server (WebSense) and then use Windows group policy to control who has to use the proxy and who does not. Simple centrally managed solution.

    +
    0 Votes
    JPElectron

    For computer's that you own you should prevent user's from making changes to the NIC and browser configurations, this can usually be done via AD Group Policy and/or by taking away admin rights from the end-use.

    For filtering I would suggest DNS Redirector http://dnsredirector.com/ it installs on a server and then any client device on the network can benefit. Some user's can bypass the block with a password (or AD login), by being given a DHCP reservation, or at logon (via login script)

    +
    0 Votes
    Clendanielc

    I would look at Smoothwall. All you will need is an extra PC with two NIC cards in it. It will do a little more than what you are asking but that's for room to grow. The express version is free and worth it. The paid portion I never used but I have setup Smoothwall in a couple small organizations and had no problems with it so far.