Solved

What is the best solution for web content filtering on a Windows domain?

Posted on 2009-05-08
20
469 Views
Last Modified: 2013-11-08
This question looks like the one posted: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/MS_Internet_Security_and_Accel/Q_23669903.html#a22290497

But I need a product where I can grant or deny access based on Active Directory users or groups.
I also need logs to see which sites are visited and by which user.
We now use Websence on a ISA server, but I also find it too expensive.

I am open for any solution as long as it is easy to use, reliable and less expensive as Websence.
The ISA server of course can stay.
0
Comment
Question by:johanvandijk
  • 10
  • 3
  • 3
  • +3
20 Comments
 
LVL 8

Expert Comment

by:thetmanvn
Comment Utility
Hi johanvandijk,

If you want your ISA stay, so you can buy GFI Web Monitor suite for ISA http://www.gfi.com/webmon. Of course, it's much cheaper than WebSense.

Below are some attach screenshot from my clients system
gfi01.png
gfi02.png
gfi03.png
0
 
LVL 14

Expert Comment

by:Roachy1979
Comment Utility
The solution in the question you pointed to is still valid....Squid will authenticate using NTLM - therefore Dansguardian can use Squid for it's ACL's

Check out :

http://howtoforge.com/dansguardian-with-multi-group-filtering-and-squid-with-ntlm-auth-on-debian-etch

Although the solution would work with any virtually any distro :)
0
 

Author Comment

by:johanvandijk
Comment Utility
It looks like GFI will cost me ¬3000 in a year, that is almost as much as Websence
0
 

Author Comment

by:johanvandijk
Comment Utility
Squid looks promising, but I am not very familiar with Linux. If they would have something which was specially made for Active Directory and I can use it with almost none linux Knowledge, then I would sure give it a try.

I am not afraid to pay for something, but there must be something what wont cost thousands of euros a year for 200 users?

0
 
LVL 5

Expert Comment

by:QEMS
Comment Utility
I've been using smoothwall express for a number of years and been really pleased with it, although I don't use the web filtering side of it from their commercial arm.

Have a look at http://www.smoothwall.com/products/networkguardian2008/ I've heard good things about it, but not used it myself.
0
 
LVL 14

Expert Comment

by:Roachy1979
Comment Utility
To add to QEMS comment, Network Guardian is the "paid for" version of DansGuardian + IPtables + Squid + loads of other components - DansGuardian was developed by the nice people at Smoothwall and OpenSourced due to the GPL'd components it contains....

I've never used it myself - but I'm a big fan of DansGuardian, and if the commercial offering is as good as the Open Source version then it's well worth a look...A Dansguardian/Squid combo allows multiple levels of access and filters the content by checking each page for words and image titles/tags and references them against the level of filtering that you want to use.....

The advantage of Smoothwall is that you don't need loads of Linux know-how to set it up.....you can achieve everything Smoothwall does by setting up the components yourself and getting them talking to each other.....but it;s not a straightforward process....
0
 
LVL 8

Expert Comment

by:thetmanvn
Comment Utility
Hi johanvandijk,

Of course Windows-based Solutions always cost much money. So you should give *nix-based solution a try. Todays it is not too hard for user even though not familiar with *nix can do, because almost open-source product are well-documented and large support community.

At that time, we provide for our clients some solutions for this kind:

It is simple to configure authenticate via Active Directory
pfSense + Squid + SquidGuard.
IPCop + Squid + URLFilter (Dansguardian)
SmoothWall Express + Squid + URL Filter  (Dansguardian)
....
0
 

Author Comment

by:johanvandijk
Comment Utility
The Network Guardian looks very promising, just the kind of solution I was looking for.
I will download a trial to test it out.
0
 

Author Comment

by:johanvandijk
Comment Utility
ofcourse... if anyone has a bether option i'm still open for it.. ;)
0
 
LVL 2

Expert Comment

by:gengw2000
Comment Utility
How about WFilter Enterprise? It can also be integrated with Active Directory and ISA. And the price is much cheaper.

http://www.imfirewall.us
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 2

Expert Comment

by:gengw2000
Comment Utility
See what users said about WFilter: http://www.networkworld.com/community/node/41259
0
 

Author Comment

by:johanvandijk
Comment Utility
Wfilter looks also fine I'm trying both programs now
0
 

Author Comment

by:johanvandijk
Comment Utility
I'm going on vacation, i'll be back in a 1,5 weeks. After that I try Wfilter.. Smoothwall comes out on ¬2000 a year, Wfilter comes on $1400 once! :)
0
 
LVL 14

Expert Comment

by:Roachy1979
Comment Utility
No problem...have a good holiday!
0
 

Author Comment

by:johanvandijk
Comment Utility
Is it true that I have to add all websites in Wfilter?
If  I look at the category lists I see no websites mentioned.
0
 
LVL 2

Expert Comment

by:gengw2000
Comment Utility
No. WFilter already has a default url database included. Though you can't see the websites list, you can search the url database in "Category Settings"->"Category Search".
And you also can add your own websites and categories.
0
 

Author Comment

by:johanvandijk
Comment Utility
I tested wfilter, for some sites, but some sites werent categorised.
I'm still looking furder now.
0
 

Author Comment

by:johanvandijk
Comment Utility
Someone came with an solution, I will try Barracuda Friday
0
 
LVL 9

Expert Comment

by:samiam41
Comment Utility
Any news?  I was curious to see where this went.
0
 

Accepted Solution

by:
johanvandijk earned 0 total points
Comment Utility
The Barracuda server works great!
Support is good, it works with AD, good logs, good filtering and it costs about ¬ 1000 p/y in stead of ¬ 2000 or ¬ 3000 p/y.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

There are several problems reported according slow link speeds or poor performance in TMG 2010, UAG 2010 or ISA 2006. I want to collect here some of the common issues together to give a brief overview what can be the reason. Nevertheless, not all of…
There are many benefits to finding online courses that align with your personal or career goals. Read more about our reasons for continuing your education in technology.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now