Welcome to ISAserver.org

Is it really this hard to create an allow rule for certain sites??

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Is it really this hard to create an allow rule for certain sites??

Page: [1]

Message

<< Older Topic Newer Topic >>

Is it really this hard to create an allow rule for cert... - 10.Mar.2009 1:39:57 PM

persiannight

Posts: 41
Joined: 5.Mar.2007
Status: offline

I have a client that I have set up isa 2006 for. They gave me a list of particular websites that they only want people to get to.

for example the want to allow www.msn.com

I created the rule but there are so many embedded links with msn.com that it's a royal pain the butt to get it to come up properly. Is there an easier way to do this??

Maybe the best thing to do is create a block list instead of an allow???

Post #: 1

Featured Links*

RE: Is it really this hard to create an allow rule for ... - 10.Mar.2009 3:45:40 PM

richardhicks

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline

This is the real problem with static whitelists/blacklists. They don't take in to account that so much content is dynamic, especially with portal sites like www.msn.com. A much better solution is to employ a content filtering product like Websense. With Websense you can specify content categories that users are allowed or denied to see. Obviously it costs money, but as you can see it is much easier and a lot more effective than trying to create allow or deny rules on your own.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to persiannight)

Post #: 2

RE: Is it really this hard to create an allow rule for ... - 10.Mar.2009 4:52:30 PM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

I agree, or GFI Webmonitor.

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to richardhicks)

Post #: 3