Solved

What is the best solution for web content filtering on a Windows domain?

Posted on 2009-05-08
20
486 Views
Last Modified: 2013-11-08
This question looks like the one posted: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/MS_Internet_Security_and_Accel/Q_23669903.html#a22290497

But I need a product where I can grant or deny access based on Active Directory users or groups.
I also need logs to see which sites are visited and by which user.
We now use Websence on a ISA server, but I also find it too expensive.

I am open for any solution as long as it is easy to use, reliable and less expensive as Websence.
The ISA server of course can stay.
0
Comment
Question by:johanvandijk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 3
  • 3
  • +3
20 Comments
 
LVL 8

Expert Comment

by:thetmanvn
ID: 24334601
Hi johanvandijk,

If you want your ISA stay, so you can buy GFI Web Monitor suite for ISA http://www.gfi.com/webmon. Of course, it's much cheaper than WebSense.

Below are some attach screenshot from my clients system
gfi01.png
gfi02.png
gfi03.png
0
 
LVL 14

Expert Comment

by:Roachy1979
ID: 24334715
The solution in the question you pointed to is still valid....Squid will authenticate using NTLM - therefore Dansguardian can use Squid for it's ACL's

Check out :

http://howtoforge.com/dansguardian-with-multi-group-filtering-and-squid-with-ntlm-auth-on-debian-etch

Although the solution would work with any virtually any distro :)
0
 

Author Comment

by:johanvandijk
ID: 24336137
It looks like GFI will cost me ¬3000 in a year, that is almost as much as Websence
0
Do you have a plan for Continuity?

It's inevitable. People leave organizations creating a gap in your service. That's where Percona comes in.

See how Pepper.com relies on Percona to:
-Manage their database
-Guarantee data safety and protection
-Provide database expertise that is available for any situation

 

Author Comment

by:johanvandijk
ID: 24336628
Squid looks promising, but I am not very familiar with Linux. If they would have something which was specially made for Active Directory and I can use it with almost none linux Knowledge, then I would sure give it a try.

I am not afraid to pay for something, but there must be something what wont cost thousands of euros a year for 200 users?

0
 
LVL 5

Expert Comment

by:QEMS
ID: 24336662
I've been using smoothwall express for a number of years and been really pleased with it, although I don't use the web filtering side of it from their commercial arm.

Have a look at http://www.smoothwall.com/products/networkguardian2008/ I've heard good things about it, but not used it myself.
0
 
LVL 14

Expert Comment

by:Roachy1979
ID: 24336926
To add to QEMS comment, Network Guardian is the "paid for" version of DansGuardian + IPtables + Squid + loads of other components - DansGuardian was developed by the nice people at Smoothwall and OpenSourced due to the GPL'd components it contains....

I've never used it myself - but I'm a big fan of DansGuardian, and if the commercial offering is as good as the Open Source version then it's well worth a look...A Dansguardian/Squid combo allows multiple levels of access and filters the content by checking each page for words and image titles/tags and references them against the level of filtering that you want to use.....

The advantage of Smoothwall is that you don't need loads of Linux know-how to set it up.....you can achieve everything Smoothwall does by setting up the components yourself and getting them talking to each other.....but it;s not a straightforward process....
0
 
LVL 8

Expert Comment

by:thetmanvn
ID: 24337009
Hi johanvandijk,

Of course Windows-based Solutions always cost much money. So you should give *nix-based solution a try. Todays it is not too hard for user even though not familiar with *nix can do, because almost open-source product are well-documented and large support community.

At that time, we provide for our clients some solutions for this kind:

It is simple to configure authenticate via Active Directory
pfSense + Squid + SquidGuard.
IPCop + Squid + URLFilter (Dansguardian)
SmoothWall Express + Squid + URL Filter  (Dansguardian)
....
0
 

Author Comment

by:johanvandijk
ID: 24352235
The Network Guardian looks very promising, just the kind of solution I was looking for.
I will download a trial to test it out.
0
 

Author Comment

by:johanvandijk
ID: 24358325
ofcourse... if anyone has a bether option i'm still open for it.. ;)
0
 
LVL 2

Expert Comment

by:gengw2000
ID: 24371286
How about WFilter Enterprise? It can also be integrated with Active Directory and ISA. And the price is much cheaper.

http://www.imfirewall.us
0
 
LVL 2

Expert Comment

by:gengw2000
ID: 24371295
See what users said about WFilter: http://www.networkworld.com/community/node/41259
0
 

Author Comment

by:johanvandijk
ID: 24373002
Wfilter looks also fine I'm trying both programs now
0
 

Author Comment

by:johanvandijk
ID: 24386266
I'm going on vacation, i'll be back in a 1,5 weeks. After that I try Wfilter.. Smoothwall comes out on ¬2000 a year, Wfilter comes on $1400 once! :)
0
 
LVL 14

Expert Comment

by:Roachy1979
ID: 24386630
No problem...have a good holiday!
0
 

Author Comment

by:johanvandijk
ID: 24465618
Is it true that I have to add all websites in Wfilter?
If  I look at the category lists I see no websites mentioned.
0
 
LVL 2

Expert Comment

by:gengw2000
ID: 24465895
No. WFilter already has a default url database included. Though you can't see the websites list, you can search the url database in "Category Settings"->"Category Search".
And you also can add your own websites and categories.
0
 

Author Comment

by:johanvandijk
ID: 24471279
I tested wfilter, for some sites, but some sites werent categorised.
I'm still looking furder now.
0
 

Author Comment

by:johanvandijk
ID: 24490526
Someone came with an solution, I will try Barracuda Friday
0
 
LVL 9

Expert Comment

by:samiam41
ID: 24594545
Any news?  I was curious to see where this went.
0
 

Accepted Solution

by:
johanvandijk earned 0 total points
ID: 24612545
The Barracuda server works great!
Support is good, it works with AD, good logs, good filtering and it costs about ¬ 1000 p/y in stead of ¬ 2000 or ¬ 3000 p/y.
0

Featured Post

Percona Live Europe 2017 | Sep 25 - 27, 2017

The Percona Live Open Source Database Conference Europe 2017 is the premier event for the diverse and active European open source database community, as well as businesses that develop and use open source database software.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question