TMG Server Requirements Compared To Websense (Full Version)

All Forums >> [Threat Management Gateway (TMG) 2010] >> General



Message


anthonymel -> TMG Server Requirements Compared To Websense (16.Mar.2012 2:27:11 AM)

We are a school that is coming up on our Websense contract expiring this August and want to begin filtering HTTPS traffic. Websense tells me that I would need another appliance to the all ready two servers I have dedicated to it. They are asking for around 45K for three years.

Microsoft TGM is way way way cheaper due to our campus license agreements with them. But my real question is why does Websense need three servers for what TMG can do in one?

Maybe I'm wrong here but the server we have ready for it has 16GB RAM and a quad core Xeon. We have about 800 computers and average around 200 requests per second.

Can TMG really do Malware and HTTPS inspection as well as URL filtering in one box?




dvizzle -> RE: TMG Server Requirements Compared To Websense (16.Mar.2012 11:34:26 AM)

If you have the money to spend, go with Websense. TMG's URL filtering is horrible.

Might want to keep Websebse for the URL filtering, and use TMG for HTTPS inspection and anti-malware.




anthonymel -> RE: TMG Server Requirements Compared To Websense (16.Mar.2012 11:41:10 AM)

I like Websense but the cost is out of hand for a school disctrict. Also, their server requirments are just silly for a web filter.

Have you personally tried both products? What's lacking in TGM.

Thanks!




dvizzle -> RE: TMG Server Requirements Compared To Websense (16.Mar.2012 11:59:34 AM)

TMG's URL filtering is just outright bad.

I understand it is their first attempt at it, and there is growing pains, and it has gotten better since they first rolled it out....

But SO MANY bad sites get through compared to other vendors.

We wanted to get rid of our 3rd party URL filtering appliance as well, due to the cost, so we evaluated 3 different ones.

Websense, 8E6 and TMG.

There is a really great script someone wrote, that I can't find right now. But anyway, it is a list of tons of sites that should be blocked, and that cover a huge gambit of URL filtering categories.

Set the proxy on the box to point to the one we are testing, and it does an HTTP get to that list of URL's, and reports if it is blocked or allowed.

WebSense and 8E6 scored very well as far as what was blocked.
TMG only blocked about 40% of the sites the other 2 did. Very poor.

This was right when TMG came out, and people have said it has gotten better, but I still think there is a long way to go before people will trust TMG to do proxy, URL filtering, HTTPS inspection, etc.

There have also been independent testing done by many security websites, and in the URL filtering department, TMG is usually in the back of the pack.




anthonymel -> RE: TMG Server Requirements Compared To Websense (16.Mar.2012 12:11:06 PM)

Thank you for that great explaination. We are also looking at M86. What are you currently using?




dvizzle -> RE: TMG Server Requirements Compared To Websense (16.Mar.2012 12:29:21 PM)

M86 is great, another one is Barracuda's new appliance.




ivyjanesmith -> RE: TMG Server Requirements Compared To Websense (17.Mar.2012 8:29:07 AM)

Hello Guys, Thank you for this wonderful information. This would be perfect with my project plan!




Page: [1]