proxy servers - approved sites based on user id

Posted on 2004-09-27
Medium Priority
Last Modified: 2010-04-10
The uS internet browser, ie6, has an approved sites option that allows
us to control user access to the internet.  You can white list or black list.
We needed to apply a user based list of approved sites at login.
Turns out, can't be done, so what  about the proxy route?

Is it possible for a proxy server to inspect a http request header, and allow/disallow
internet site access based on information contained in the header?  I believe it
is possible to include the user id in this header (per the ie administration kit).

Is it possible for a proxy server to base the access decision on a program/script
we design?  It may be that the user id cannot be placed in the http request header.
In that case will have to go out and discover ourselves who is logged in.

Are there free/inexpensive proxy servers available.   We have 200 users.
Lightning speed is not an issue here.  

We do not use static ips.  Users can login at any machine.
Question by:hank1
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 15

Expert Comment

ID: 12160869
You could do that with a web filtering software like surfcontrol, or if you want something free, you could use the Squid Proxy, wich is free, and runs on a linux box..


Squid (free):

Accepted Solution

ndy78 earned 200 total points
ID: 12162638
As far as I am informed this is only possible using Microsoft ISA Server 2000 / 2004. I  am using it in a campus environment where different access rules apply to teachers and students. It is even possible to open ports on a user / group basis. And after all it's an easy to use proxy / gateway.


Expert Comment

ID: 12167902
Both ISA and SQUID will run access lists based on the url, but neither will be able to force the browser to add the users id as a parameter to the url. In any case, any user id in the header would be for the external site, not your internal ids. Sounds like what you are looking for is a proxy solution that will integrate with your internal authentication scheme, eg, with MS ISA, a Windows user can be forced to authenticate against the proxy server prior to being allowed access to a site, allowing the admin to apply permissions based on the Windows ID or group - this assumes you are running a centralised authentication model, AD for instance in an MS shop.

Which is the best product - all depends on your current setup. Squid is free and extremely scalable - I have seen it used to serve an entire campus, 30,000 user +, but it is tricky to integrate into a Windows architecture. If you are running a Linux shop, it should be easy to integrate into your current authentication scheme. ISA has a price, but is simple to integrate into Windows. These are only 2 of many products, do a google search for proxy server, and you'll return thousands of products, each of which will be a perfect fit for one particular niche.

Hope this helps
Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users


Expert Comment

ID: 12168387
We tried to set it up with squid, too. In fact it could be possible - but the development costs to do it (must be self programmed) did not make it an option compared to just buying ISA and have it all set up here. We had an Active Directory prior chosing a Proxy Server that does what we need.
LVL 15

Expert Comment

ID: 12169045
Surfcontrol let you do it by users btw.. but it's more costly.. it uses your Active directory user database..

Expert Comment

ID: 12169858
As far as I can see, Surfcontrol uses MS Proxy or ISA Server to apply these rules. So its more an add-on to these products. I think he could go with ISA alone.
LVL 15

Expert Comment

ID: 12170125
No, there is a standalone version of it btw.. it'S the one for "microsoft windows".
LVL 15

Expert Comment

ID: 12170133

Expert Comment

ID: 12173002
thx, my error.

so hank1, were  these proposals ok for you or has it to be something completely different from these?

Author Comment

ID: 12319579
It's uS  or nothing.  The proxy servers we tried killed the company's main page login.  Installing yet another app
on the box is out.  

Featured Post

Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question