Welcome to ISAserver.org

Firewall Clients and URL Filtering

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall Clients and URL Filtering

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Clients and URL Filtering - 2.Mar.2008 4:17:42 AM

big_dazza

Posts: 447
Joined: 24.Apr.2003
Status: offline

Hi. All my users are combination WP + FW clients. We push out their config via GPO. We also have WebMarshal running URL filtering.

If users manage to remove their IE proxy settings, then the FW client sends the IE traffic to ISA, but in the form of IP addresses instead of web addresses. If this happens they can access any site as it bypasses the WebMarshal filtering.

What possible way is there to stop this happening, bearing in mind GPO settings only apply periodically and users can keep removing their IE proxy settings?

Thanks

Post #: 1

Featured Links*

RE: Firewall Clients and URL Filtering - 2.Mar.2008 9:30:57 AM

ferrix

Posts: 363
Joined: 16.Mar.2005
Status: offline

If your web filter really can't understand requests unless they are in proxy form, that sounds like a bug in WebMarshal.

It wouldn't be hard to make another filter that fooled yours into seeing the URLs in the correct form, but it should not be necessary if their software works right. Check with their support, I say.

(in reply to big_dazza)

Post #: 2

RE: Firewall Clients and URL Filtering - 5.Mar.2008 9:38:25 PM

bboxron

Posts: 1
Joined: 5.Mar.2008
Status: offline

Hi,
Maybe these links will help you to solve your problem. It's about hostlogger. I tried it and since my firewall clients resolved hostnames and filtered urls.
http://forums.isaserver.org/m_2002040128/mpage_1/key_/tm.htm
http://www.elmajdal.net/ISAServer/HostLogger.aspx

(in reply to ferrix)

Post #: 3

RE: Firewall Clients and URL Filtering - 9.Mar.2008 4:29:12 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

What possible way is there to stop this happening, bearing in mind GPO settings only apply periodically and users can keep removing their IE proxy settings?

Why not Remove the Connections Tab by using GPO ??

In this way, your users wont be able to change the proxy settings

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to big_dazza)

Post #: 4