LambtonIT
asked on
Monitoring and content restriction with Netscaler 10.1 and RNAT
I am currently using RNAT to grant our internal workstations internet access.
Is there a way to monitor/restrict these outgoing connections?
thank you.
Is there a way to monitor/restrict these outgoing connections?
thank you.
ASKER
ok. thanks
This question needs an answer!
Become an EE member today
7 DAY FREE TRIALMembers can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
You could build policies that detect specific strings in URLs to block traffic to sites based on character strings (you could block entire sites / domains if you wanted to). You could also use the HTTP callout method to query a secondary server where you store a variety of "bad info" to block in a database. When the callout returns a "FAIL", the connection would be blocked.
Most likely, though, you're looking for a content filtering solution to keep your users away from certain sites and types of contents. The most straight-forward way of doing this may well be to implement a third-party content filtering solution and specifying that as the cache server for content for your client connections. This will bring all of the client connections to the NetScaler and allow you to leverage any security and logging that are already in place, but the work of retrieving content from the Internet and filtering it would be left to the third-party product.