RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004

  • From: "Ara" <ara@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 16 Mar 2005 10:10:19 -0800

Tom,

I have deployed firewall client so I don't have to go on every machine
and set up the proxy service. Do these clients get benefit from cache?
Is this the right way? Also what about for fire fox users? 

About filtering, looks like there is the problem with filtering products
and our hands is tight to get these unmonitored traffic filtered. 

What do you suggest to force people use internet explorer and nothing
else

Thank you

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, March 16, 2005 6:54 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter
5.0 for ISA Server 2004

 

http://www.ISAserver.org

Hi Dan,

 

There might be a number of reasons, but I'm suspecting those are servers
you're communicating with that have problems with authenticating proxies
in the path. Sort of like the Hotmail/MSN and Windows Update issue.

 

HTH,

 

Tom
www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- ISA Firewalls

 

 

________________________________

From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: Wednesday, March 16, 2005 8:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter
5.0 for ISA Server 2004

http://www.ISAserver.org

This leads me back to a question I had asked before, but no-one
responded.  I'm having troubles passing authentication, even using FWC
when accessing streaming video/audio.  Sometimes it works just fine, but
quite often it will come up with a login box when accessing the stream.
Sometimes, if you cancel the login, the authentication works anyways and
the stream will play.  Other times I have to put in DOMAIN\Username &
password into the login box to get past the rule.  

 

Is this related to one of those "fixes" you're referring to?

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, March 16, 2005 09:35
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter
5.0 for ISA Server 2004

 

http://www.ISAserver.org

Hi Dan,

 

Yeah, its a real problem. The HTTP redirector would work for anonymous
connections in 2000, but the auth model changed (for the better) for
2004, but the filter guys didn't get wind of it or something, so now if
you allow users to disable their Web proxy config, they can still auth
via FWC and get by the Web filter, even though the Web proxy filter is
still bound to the HTTP protocol.

 

Supposed to be fixed soon, though.

 

Tom
<http://www.isaserver.org/shinder> www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
<http://tinyurl.com/3xqb7> http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: