I have a small ethernet LAN (1 NT 4.0 Server, 20 PC’s with some running Win98 and some running Win2000, and a few Macs). I connect to the internet via a T1 line provided by CBeyond Communications through what they call an IAD device (Cisco router). This device allows the sharing of the T1 line between our PBX phone system for voice communications and our internet connection (the new “soft switch” technology). This IAD Cisco router gateway connects directly into one of my two Dell 24-port switches, as do all of my PC’s, the NT 4.0 Server, and the Macs. One of our PC’s acts as our FTP server (ProGuild FTP), to whose static internal IP address CBeyond had to forward ports 20 and 21 through this IAD Cisco router gateway so that FTP clients outside of our LAN could reach our FTP server.
Currently everyone has full and unlimited access to the internet. My goal is to control which workstations have access to the internet and which do not, as well as be able to put in place content filtering to keep certain types of sites such as porno sites out of everyone’s reach. I also would like to have a “real” firewall, and not just the questionable “benefit” of having that Cisco IAD device, which is supposed to sort of hide all our PC’s and Macs from the outside world. Unfortunately, I do not have the budget to buy a good hardware firewall solution, so I am considering trying Proxy-Pro Professional Gateway as a proxy solution to accomplish my goals.
Does anyone have any experience with Proxy-Pro Professional Gateway, or helpful advice on this? Anyone has other suggestions as to how I can accomplish my goals with some other approach?
Thanks for any information or advice.
