• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 654
  • Last Modified:

URL filtering

We would like to allow the VPN users that come through our 2 Cisco ASA's to be limited to a handful of Internet sites.  What is the best (and easiest) way to accomplish this?  Can the solution be different by user or by ASA or is standard for all users?  We don't necessarily need this for our network users, but may in the future include desktop pc's to use this solution also.  Any advice is greatly appreciated.  Thanks!!
0
turtletrax
Asked:
turtletrax
1 Solution
 
batry_boyCommented:
>>What is the best (and easiest) way to accomplish this?

Best and easiest don't always go together...;)

However, if you want my opinion on best, you have to use a 3rd party filtering application or appliance.  I've used Websense in the past and it works well.  It has a lot of granularity with its settings (you can impose quotas where you determine how long a user can surf sites that are typically blocked by using their quota time, you can have different policies be in effect at different times of day and on business days only, weekends only or any combination you can think of, etc.)  It integrates with Windows NT domains or AD domains, Java System Directory Server and Novell NDS, which answers your question about it being able to be implemented on a per user basis.  Most definitely, or it can be implemented on a group basis, such as AD user groups.

Some have considered Websense the "Cadillac" of the content filtering solutions, but it's what I've used and one that I can recommend.

However, the point is that you will need a 3rd party component to do content filtering with since the ASA cannot do it by itself.
0
 
turtletraxAuthor Commented:
Thanks, you were exactly right about needing a 3rd party application/appliance.  I found I couldn't do what I needed to do unless I had something else.  We are going to try a Barracuda web filtering appliance.  We are expecting delivery of it any day so once we have it in place I will report back to let everyone know how we like it.  Thanks for your help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get Cisco Certified in IT Security

There’s a high demand for IT security experts and network administrators who can safeguard the data that individuals, corporations, and governments rely on every day. Pursue your B.S. in Network Operations and Security and gain the credentials you need for this high-growth field.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now