Link to home
Start Free TrialLog in
Avatar of Jay_Jay70
Jay_Jay70Flag for Australia

asked on

Content Filtering Appliance

Hi,

i am after some opinions if i may - I have a Private IP managed network which incorporates about 100 Sites. The PIX in our COLO acts as the gateway for all traffic in and out of our network.

I am looking for a content filtering solution similar to ISA, that can sit on an appliance (I know ISA can but at this stage we are looking at alternatives)...Basically i want the device to sit on the inside of our firewall, and do all the filtering as traffic goes out....URL control is the biggest thing for us

Ideally, the device (If possible) can control site access based on network source - so for example, traffic from a certain subnet can have certain rules applied to it, i would like to avoid having to manage users and groups within the device, and considering our AD centralisation isnt complete, LDAP integration doesnt really help either..

Any ideas on what device out there will achieve what i am asking.....cost is of course a consideration and it will need to support around 1000 users
ASKER CERTIFIED SOLUTION
Avatar of TreyH
TreyH
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Kutyi
Kutyi
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jay_Jay70

ASKER

No after software as its going into colo

Not after add ons for the PIX either, need a middle man...

So far the barracudda is looking pretty sweet
Avatar of AndrewCink
AndrewCink

Barracuda is an e-mail filter, which can filter spam inbound or outbound from your network. What you need is a Websense setup. You can integrate it with the PIX and the PIX will send all approval requests to the websense server. This would be the preferred configuration in my opinion. Otherwise you can put the Websense server on a mirrored port in line between the PIX and your LAN and it will intercept, log and abort any connections to websites you don't approve of. Regardless of whether you use it in line manually, or integrated with your PIX, websense is the best solution for this really.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
barracuda isnt just email - its web - and looking like exactly what i need so far  - will look a little more at websense - also looking at ASA range for filtering
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
decided on the Barra.....Websense was too expensive and didnt want to go a Flakey linux solution :) Cheers

Will split for comments either way
Barracuda Web Filter - $2,449.99, then $549.00 per year to update

http://www.cdw.com/shop/products/default.aspx?EDC=964416

Online Demo:

http://webfilter.barracuda.com/cgi-mod/index.cgi?&user=guest&password=a27158f2481edd1932139b3d3ab2b440&et=1248038664&auth_type=Local&locale=en_US&primary_tab=BASIC

 

 

Websense V10000  quoted on phone at $15,000.00, then not sure what it is per year to update

http://www.websense.com/content/V10000.aspx

Online Demo:

You have to register to watch it. http://www.websense.com/welcome/MiscLandings/regPage/

 

 

SonicWall Content Security Manager 3200 - $3694.00, then around $1500 per year to update

http://www.cdw.com/shop/products/default.aspx?EDC=994943

Online Demo:

http://www.websense.com/content/V10000.aspx

 

 

ContentWatch  quoted on phone at $6254.00, then $1700 per year to update.

http://www.contentwatch.com/

Online Demo:

http://www.contentwatch.com/appliance/demo

And the winner is.....
Baracuda by far. It does everything you want done as a content filter plus more at the lowest price.  Pretty amazing
yup, i have been running it for over 12 months....only problem i have had is duplex speeds - it doesnt auto duplex properly and it is intermittent in its ability to block application updates (McAfee, Windows update etc) but other than that, its been great :)