Question on Surfcontrol (Full Version)

All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons



Message

thecoffeeguy -> Question on Surfcontrol (29.Nov.2005 8:54:34 PM)

Hello!

We are currently looking to possibly implementing Surfcontrol on our network here in conjunction with our ISA 2004 Server. We like a lot of the features and abilities that it has and of course, the security aspect.

I was hoping to ask a few questions to people who currently employ Surfcontrol.

1.) We run Active Directory here and the ISA Server is part of the domain. Can you get real specific with users and groups and apply them to rules in Surfcontrol? If so, do you need to install anything else?

2.) Do you need to install the firewall client piece? Is this necessary to find usernames and groups to apply to specific rules?

3.) Can you specifically block a domain or domains that are in a category in Surfcontrol, but allow access to other domains in that same category? (For example, lets say I want to block ALL Sports pages, except one or vice versa.)

Lastly, how do you like it?

Thanks,

thecoffeeguy



Ashokk001 -> RE: Question on Surfcontrol (29.Nov.2005 9:05:28 PM)

Coffeeguy,

Yeah you can use the user specific rules on the isa. If you install surfcontrol on isa server then when using the rules administrator (surf control) you will have the option to drill down on the AD users. I think this is listed in the "who" section. You can even define computers, subnets etc.

The last question depends on how you order the rules i think. If in doubt give surf control a call or email them. Its a really good software. Easier to use and real time monitoring of websites etc.

Ashok.



thecoffeeguy -> RE: Question on Surfcontrol (1.Dec.2005 7:49:49 PM)

quote:

ORIGINAL: Ashokk001

Coffeeguy,

Yeah you can use the user specific rules on the isa. If you install surfcontrol on isa server then when using the rules administrator (surf control) you will have the option to drill down on the AD users. I think this is listed in the "who" section. You can even define computers, subnets etc.

The last question depends on how you order the rules i think. If in doubt give surf control a call or email them. Its a really good software. Easier to use and real time monitoring of websites etc.

Ashok.


Thanks for the help and input. I appreciate it.

So you don't need to install the firewall client then? Surfcontrol will allow you to pick and choose using Active Directory. If that is the case....cool!

I look forward to using it. I heard it works great.

Oh ya, how was the install of it? Also, once it is installed, how do you interface the rules of surfcontrol with the rules of the firewall policy? Do you just use the surfcontrol inteface? The ISA interface? Both?

Thanks for the help!

thecoffeeguy



Ashokk001 -> RE: Question on Surfcontrol (1.Dec.2005 10:16:39 PM)

coffeeguy,

The install went fine and yes it is a very good filtering software we are very pleased with it. As for configuration of surf control, you do the rules etc using the Rules Administration which will get installed when you install surf control. Along with this it will also install Monitor which allows you to mpnitor the websites in realtime as they are viewed/browsed by users.

There is also a reporting feature - Reports Central which has lots of standard reports setup. The install with install the java client i think - it uses this for the reporting. Check out the user guides on web filter. Iyt gives you good instructions with screenshots.

Oh by the way the access to AD groups and uses is only available if you join the isa server to the domain. I'm not sure if surf control will be able to get data via RADIUS as we have the isa server joined to our domain.

HTH,

Ashok.



Page: [1]