We have ISA 2004 set up on a 25 user network. Part of this is a computer lab for children. We would like to add a web filter to ISA to protect the kids from adult content. Any recommendations?
I have used Surf Control in the past and its great but a bit pricy
Hi Andrew,
Yes, try GFI WebMonitor 3. I have a review that will be up on the Web site soon. Its pretty nice for the price, but doesn't provide the same granular control and comprehesnive database as the pricey offerings, but it may be enough to fit your needs.
Posts: 801
Joined: 5.Apr.2005
From: sydney
Status: offline
Hmmm that is disapointing to hear that because i acutally wanted to give GFI ago, i am currently using surfcontrol. The bad side on surfcontrol is because it runs on sql it chews up alot of the memory and requires a decent P4 server. I have seen at times on my server that it chews upto 1.5GB of the memory and does not release it. Hopefully with the new sql the problem will be better, for surfcontrols sake.
Posts: 2187
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
Sunny.C, While this is drifting off topic a bit, you can configure SQL to limit the consumption of memory just as you can for the logging MSDE. Anyway, memory is cheap and generally, more is better.
_____________________________
The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.
I have ran a quick test and this are my first impressions:
wpad issue seems to be solved. So the monitoring feature should be usuable now.
if an object is blocked by the AV scanning you can get now some indication in the ISA log (URL field). Hmm... why didn't they put that info in the field 'Filter Information' or 'HTTP Status Code'?
the site rating is still useless, probably because the YahooSearch service on which this feature is based isn't reliable in the first place.
Posts: 2187
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
From the negative feedback I read on the GFI forum, I would say it still needs some growing up to do.
Since they removed the freeware version and my trial period has expired, I can not test and report on supposed enhancements. I did not try cleaning out all traces of it after the uninstall to see if it would reset the trialware counter.
_____________________________
The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.
Posts: 2187
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
I am in DivIT connected by WAN to CorpIT. CorpIT manages the connection to the ISP through PIX and a Symantec SGS box for content filtering.
I was running just the freeware portion of WM3 until GFI clawed it back so I removed it. I have no third party app installed.
I manage a 500 node business network. There is a process network behind mine that is separated by a CheckPoint firewall. It goes through my network to get out on the WAN/Internet.
The bulk of my users are still on my old MSP2 proxy which has way too wide access. The web proxy side of MSP2 is broken so users are getting through on winsock with the FWC. I inherited it as-is from another admin.
I cannot deploy ISA to the masses until management buys into the notion of limited access. I have only a few nodes going through ISA now based on special needs for extremely limited authenticated users and/or special anonymous access requirements. Tomorrow, my supervisor takes my proposal for limited access for most users to the managers and if/when they accept it, I will migrate my users to ISA.
The ISA, MSP2, and CheckPoint have rules through the upstream PIX.
_____________________________
The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.