Web Secure Gateways - Taking it on the cloud

Hi all...am here to seek your opinions.

Time has come for our Web Proxy / Cache renewal. I was wondering if it's the right time to look at alternative technologies. Our Current Web Proxy gateway belongs to the categories of Blue Coat / Secure Computing's Webwasher appliances.

I was looking at Messagelab's offering of provisioning Web security services and McAfee who now owns Secure Computing, start up its own Web Protection service. This is equivalent to taking this securing the web gateway service on the cloud with brings about reduction of admin costs.

What are the caveats here? For sure I would lose the local caching aspect bringing about a certain delay in responses to oft visited sites.
The questions are:

1. What are my options to keep a server (squid /ISA etc) internally for caching purposes while use these SaaS providers for everything else?

2. I need to undertake bandwidth management, assigning quotas of the total Internet bandwidth to different Active Directory group members. For example, my SLA with Dept. of Marketing is that they would be provided with 4MB of total Internet bandwidth at all times and Engineering would receive 8MB. I have Cisco Routers 2800s and ASA 5520 firewalls at the perimeter. Can I use these in any way?

3. If I take these services out on the cloud, how would I assign Internet browsing policies which are integrated with my AD groups? ( Maybe this is a question to be asked with messagelabs or McAfee but just thought of asking here for someone might have been there and done that.

Pls advise!!
SwiftAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Roachy1979Commented:
You can handle the bandwidth management and local caching using Squid:

http://pcquest.ciol.com/content/linux/103080904.asp

http://www.papercut.com/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory

You can also use the Malware Block List within Squid....http://www.malware.com.br/

In fact, I can't think of anything that can't be done in house - while the maintenance cost may be higher due to increased internal resource usage, no licencing fees would be needed...
0
SwiftAuthor Commented:
Thanks Roachy

From the bandwidth management perspective,as related in my second query, do I have commercial alternatives?

I read about packetshaper from Blue Coat but that doesn't fit the need as it's more from Packet shaping perspective. Does Cisco have anything up their sleeve? I want to avoid the open source way for the simple reason of inhouse maintenance unavailabiltiy.

0
Roachy1979Commented:
Sorry....couldn't honestly advise.....we use Squid internally here!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnArmstrongCommented:
Yes, Cisco has a product ' Cisco cloud web security', then of course there is market leader Websense and Mcafee which you already mentioned. Gartner group released a study in 2012 so you can check out who else made it to the magic quadrant.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.