• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 499
  • Last Modified:

What is the best solution for web content filtering on a Windows domain?

This question looks like the one posted: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/MS_Internet_Security_and_Accel/Q_23669903.html#a22290497

But I need a product where I can grant or deny access based on Active Directory users or groups.
I also need logs to see which sites are visited and by which user.
We now use Websence on a ISA server, but I also find it too expensive.

I am open for any solution as long as it is easy to use, reliable and less expensive as Websence.
The ISA server of course can stay.
0
johanvandijk
Asked:
johanvandijk
  • 10
  • 3
  • 3
  • +3
1 Solution
 
thetmanvnCommented:
Hi johanvandijk,

If you want your ISA stay, so you can buy GFI Web Monitor suite for ISA http://www.gfi.com/webmon. Of course, it's much cheaper than WebSense.

Below are some attach screenshot from my clients system
gfi01.png
gfi02.png
gfi03.png
0
 
Roachy1979Commented:
The solution in the question you pointed to is still valid....Squid will authenticate using NTLM - therefore Dansguardian can use Squid for it's ACL's

Check out :

http://howtoforge.com/dansguardian-with-multi-group-filtering-and-squid-with-ntlm-auth-on-debian-etch

Although the solution would work with any virtually any distro :)
0
 
johanvandijkAuthor Commented:
It looks like GFI will cost me ¬3000 in a year, that is almost as much as Websence
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
johanvandijkAuthor Commented:
Squid looks promising, but I am not very familiar with Linux. If they would have something which was specially made for Active Directory and I can use it with almost none linux Knowledge, then I would sure give it a try.

I am not afraid to pay for something, but there must be something what wont cost thousands of euros a year for 200 users?

0
 
QEMSCommented:
I've been using smoothwall express for a number of years and been really pleased with it, although I don't use the web filtering side of it from their commercial arm.

Have a look at http://www.smoothwall.com/products/networkguardian2008/ I've heard good things about it, but not used it myself.
0
 
Roachy1979Commented:
To add to QEMS comment, Network Guardian is the "paid for" version of DansGuardian + IPtables + Squid + loads of other components - DansGuardian was developed by the nice people at Smoothwall and OpenSourced due to the GPL'd components it contains....

I've never used it myself - but I'm a big fan of DansGuardian, and if the commercial offering is as good as the Open Source version then it's well worth a look...A Dansguardian/Squid combo allows multiple levels of access and filters the content by checking each page for words and image titles/tags and references them against the level of filtering that you want to use.....

The advantage of Smoothwall is that you don't need loads of Linux know-how to set it up.....you can achieve everything Smoothwall does by setting up the components yourself and getting them talking to each other.....but it;s not a straightforward process....
0
 
thetmanvnCommented:
Hi johanvandijk,

Of course Windows-based Solutions always cost much money. So you should give *nix-based solution a try. Todays it is not too hard for user even though not familiar with *nix can do, because almost open-source product are well-documented and large support community.

At that time, we provide for our clients some solutions for this kind:

It is simple to configure authenticate via Active Directory
pfSense + Squid + SquidGuard.
IPCop + Squid + URLFilter (Dansguardian)
SmoothWall Express + Squid + URL Filter  (Dansguardian)
....
0
 
johanvandijkAuthor Commented:
The Network Guardian looks very promising, just the kind of solution I was looking for.
I will download a trial to test it out.
0
 
johanvandijkAuthor Commented:
ofcourse... if anyone has a bether option i'm still open for it.. ;)
0
 
gengw2000Commented:
How about WFilter Enterprise? It can also be integrated with Active Directory and ISA. And the price is much cheaper.

http://www.imfirewall.us
0
 
gengw2000Commented:
See what users said about WFilter: http://www.networkworld.com/community/node/41259
0
 
johanvandijkAuthor Commented:
Wfilter looks also fine I'm trying both programs now
0
 
johanvandijkAuthor Commented:
I'm going on vacation, i'll be back in a 1,5 weeks. After that I try Wfilter.. Smoothwall comes out on ¬2000 a year, Wfilter comes on $1400 once! :)
0
 
Roachy1979Commented:
No problem...have a good holiday!
0
 
johanvandijkAuthor Commented:
Is it true that I have to add all websites in Wfilter?
If  I look at the category lists I see no websites mentioned.
0
 
gengw2000Commented:
No. WFilter already has a default url database included. Though you can't see the websites list, you can search the url database in "Category Settings"->"Category Search".
And you also can add your own websites and categories.
0
 
johanvandijkAuthor Commented:
I tested wfilter, for some sites, but some sites werent categorised.
I'm still looking furder now.
0
 
johanvandijkAuthor Commented:
Someone came with an solution, I will try Barracuda Friday
0
 
samiam41Commented:
Any news?  I was curious to see where this went.
0
 
johanvandijkAuthor Commented:
The Barracuda server works great!
Support is good, it works with AD, good logs, good filtering and it costs about ¬ 1000 p/y in stead of ¬ 2000 or ¬ 3000 p/y.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 10
  • 3
  • 3
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now