Link to home
Start Free TrialLog in
Avatar of mcannet
mcannet

asked on

Business Internet management/filtering solution needed

I have a client with 2 offices.  Currently they use cable modem service for internet and connect to each other via VPN.  The owner is now wanting to filter/manage internet access for some users.  Currently users have full freedom to go anywhere at anytime on the internet.  I really am looking to get suggestions for either a software or hardware solution that the manager can easily block or allow access and also block specific domains.  Any help would be greatly apprectiated
ASKER CERTIFIED SOLUTION
Avatar of jasonpaine
jasonpaine
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mcannet
mcannet

ASKER

That seems like it can't get a bit pricey.  Are you sold on this product?  Just for a basis of comparison, do you know of another product or 2 that claim the same features?
SurfControl - www.surfcontrol.com
Websense - www.websense.com
N2H2 - www.n2h2.com
http://www.barracudanetworks.ca/?gclid=CJ6DuOv58IkCFR1hYQod9iUQHQ

I have used the sonicwall and content filtering many times and had no complaint. There is about 60 catagories like porn, gambling, drugs,ect that you can enable to block or allow any site to a group of users.

I have also seen others on this site recommend sonicwall's content filter, however, you do have other good options.

hope this helps
SOLUTION
Avatar of Keith Alabaster
Keith Alabaster
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mcannet

ASKER

Just curious, if you don't mind...  How are my users categorized into groups?  Are these services AD integrated?
In the sonicwall create the content filter policy restrict everyone > create local users to bypass filter > put them into a group > bypass CF group they authenticate to the sonicwall.  
Ditto with ISA
A few more alternatives, besides the ones already posted for comparison:

You might want to check out the iPrism appliance
http://www.stbernard.com/iprism

It is an in-line filter that will block P2P traffic, manage content access (no porn) and manage bandwidth...

Threat management, application performance, real-time network reporting and control for SMB
http://www.cymphonix.com/

NetEnforcer from Allot - Bandwidth Management, Deep packet inspection, SLA, Traffic Shaping Appliance
Allot NetEnforcer service optimization devices provide the granular visibility and dynamic control that network operators need to optimize the delivery, performance and profitability of WAN and broadband services.
http://www.allot.com/

BlueCoat has another appliance. Bluecoat was chosen by the US Air Force to control their entire network:
http://www.bluecoat.com/

ISS Proventia Web Filter (software solution)
http://www.iss.net/products_services/webfilter/

Lesser-known players
http://www.webbalanced.com/

LightSpeed Systems
http://www.lightspeedsystems.com/Contentfiltering.asp

Linux-based freeware:
http://dansguardian.org/
That seems like it can't get a bit pricey > Yes Sonicwall's content filter and other sercurity services are a yearly subscription fee along with buying the firewall.
Many excellent suggestions from keith_alabaster  & lrmoore :  

The company I work at uses Squid (http://www.squid-cache.org/) to block sites and allow others.
We have a group of users with rights to access most websites and also the regular users that only have access to a list of sites.

There is probably many different configuration to it but right now we block every site for the regular users except the sites inside a list. So users send us the link, we verify it and we unblock it.
I am currently in the same delimma with needing to provide a solution to restrict users from certain unprofessional sites, and we to have the Headoffice here with Windows 2003 servers and 6 remote sited. So, my question is can ISA server installed here on our Server, restricted the remote users that connect to us via VPN connection, especially since they have their own Internet router/DSL box at each office, was not sure it would be able to restrict them? Also.. we have alot of laptops and I need to be able to control what they are doing when they take the out of office, any suggestions.. perhaps one of the above listed would fit the bill?