Discussion Locked

Policing Internet Access

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,
I'm looking for a server based solution for policing internet activity on demand. Small / medium size company (70 employees), with NT servers behind a PIX firewall.

I'd appreciate any and all suggestions or comments on this. Thanks!

5 replies

by peter johnstone

Hi,
We use a program called Web Filter from Surf Control which has plenty of scope for auto or manual blocking of sites or categories of sites. The reporting system is quite extensive allowing checks down to individual level and real time monitoring. It may suite your needs and is worth a look although it is pricey and not everyone?s cup of tea! You can also download a free evaluation copy to check it out at:

http://www.surfcontrol.com/products/web/

Details of what it will do are at:

http://www.surfcontrol.com/products/web/features.aspx

Just copy and past the URL's as they are. Hope this is of some help or at least a starting point.

Regards,
PJ

by mshavrov

There are several server-based Internet Policing software products. Our company currently use SurfControl. This software "sniffs" all traffic and sends "fake" page to user if it sees request to prohibited site. It works virtually in any environment since it's not bounded to "firewall" or "proxy" server.

But for your scenario, since you are using Cisco PIX Firewall, I would recommend WebSence. This product is completely integrated with PIX software and PIX Firewall "authorizes" URLs against WebSence server (sure, it has internal cache to improve performance). It gives to you pretty good flexibility and works better than SurfControl.

Sure there are third variant, when you install caching proxy server and then install "web filtering" software over it. In this case you will gain "web cache" which, on practice, will save to you 15-20% of traffic, but not to many companies do that.

Good luck.

This discussion is closed to new replies.