Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

proxy servers - approved sites based on user id

Posted on 2004-09-27
10
Medium Priority
?
245 Views
Last Modified: 2010-04-10
The uS internet browser, ie6, has an approved sites option that allows
us to control user access to the internet.  You can white list or black list.
We needed to apply a user based list of approved sites at login.
Turns out, can't be done, so what  about the proxy route?

Is it possible for a proxy server to inspect a http request header, and allow/disallow
internet site access based on information contained in the header?  I believe it
is possible to include the user id in this header (per the ie administration kit).

Is it possible for a proxy server to base the access decision on a program/script
we design?  It may be that the user id cannot be placed in the http request header.
In that case will have to go out and discover ourselves who is logged in.

Are there free/inexpensive proxy servers available.   We have 200 users.
Lightning speed is not an issue here.  

We do not use static ips.  Users can login at any machine.
0
Comment
Question by:hank1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
10 Comments
 
LVL 15

Expert Comment

by:Yan_west
ID: 12160869
You could do that with a web filtering software like surfcontrol, or if you want something free, you could use the Squid Proxy, wich is free, and runs on a linux box..

(Surfcontrol)
http://www.surfcontrol.com/products/web/

Squid (free):
http://www.squid-cache.org/
0
 
LVL 2

Accepted Solution

by:
ndy78 earned 200 total points
ID: 12162638
As far as I am informed this is only possible using Microsoft ISA Server 2000 / 2004. I  am using it in a campus environment where different access rules apply to teachers and students. It is even possible to open ports on a user / group basis. And after all it's an easy to use proxy / gateway.

HTH,
Andy.
0
 
LVL 5

Expert Comment

by:swinterborn
ID: 12167902
Both ISA and SQUID will run access lists based on the url, but neither will be able to force the browser to add the users id as a parameter to the url. In any case, any user id in the header would be for the external site, not your internal ids. Sounds like what you are looking for is a proxy solution that will integrate with your internal authentication scheme, eg, with MS ISA, a Windows user can be forced to authenticate against the proxy server prior to being allowed access to a site, allowing the admin to apply permissions based on the Windows ID or group - this assumes you are running a centralised authentication model, AD for instance in an MS shop.

Which is the best product - all depends on your current setup. Squid is free and extremely scalable - I have seen it used to serve an entire campus, 30,000 user +, but it is tricky to integrate into a Windows architecture. If you are running a Linux shop, it should be easy to integrate into your current authentication scheme. ISA has a price, but is simple to integrate into Windows. These are only 2 of many products, do a google search for proxy server, and you'll return thousands of products, each of which will be a perfect fit for one particular niche.

Hope this helps
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
LVL 2

Expert Comment

by:ndy78
ID: 12168387
We tried to set it up with squid, too. In fact it could be possible - but the development costs to do it (must be self programmed) did not make it an option compared to just buying ISA and have it all set up here. We had an Active Directory prior chosing a Proxy Server that does what we need.
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12169045
Surfcontrol let you do it by users btw.. but it's more costly.. it uses your Active directory user database..
0
 
LVL 2

Expert Comment

by:ndy78
ID: 12169858
As far as I can see, Surfcontrol uses MS Proxy or ISA Server to apply these rules. So its more an add-on to these products. I think he could go with ISA alone.
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12170125
No, there is a standalone version of it btw.. it'S the one for "microsoft windows".
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12170133
0
 
LVL 2

Expert Comment

by:ndy78
ID: 12173002
thx, my error.

so hank1, were  these proposals ok for you or has it to be something completely different from these?
0
 
LVL 1

Author Comment

by:hank1
ID: 12319579
It's uS  or nothing.  The proxy servers we tried killed the company's main page login.  Installing yet another app
on the box is out.  
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question