RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for ISA Server 2004
- From: "Ara" <ara@xxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 16 Mar 2005 17:50:37 -0800
Hi Tom,
Is there any way to stop those firewall clients' users bypassing the web filter
using fire fox?
Thank you
________________________________________
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, March 16, 2005 6:35 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for
ISA Server 2004
http://www.ISAserver.org
Hi Dan,
Yeah, its a real problem. The HTTP redirector would work for anonymous
connections in 2000, but the auth model changed (for the better) for 2004, but
the filter guys didn't get wind of it or something, so now if you allow users
to disable their Web proxy config, they can still auth via FWC and get by the
Web filter, even though the Web proxy filter is still bound to the HTTP
protocol.
Supposed to be fixed soon, though.
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
________________________________________
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Wednesday, March 16, 2005 8:31 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for
ISA Server 2004
http://www.ISAserver.org
I haven't seen any software products out there that will filter SNAT clients,
but it's possible there is one. Most of them rely upon the Proxy to do their
filtering, which makes sense.
________________________________________
From: Ara [mailto:ara@xxxxxxxxxxxxx]
Sent: Wednesday, March 16, 2005 00:39
To: [ISAserver.org Discussion List]
Subject: RE: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0
for ISA Server 2004
hi
do you say there is no way to monitor secure nat clients?
________________________________________
From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx]
Sent: Tue 3/15/2005 11:09 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISAserver.org - Review of SurfControl Web Filter 5.0 for
ISA Server 2004
http://www.ISAserver.org
We are running two version of SurfControl on two different ISA
installations for the same network -- ISA 2000 (for three years), and,
now ISA 2004. SurfControl made a drastic change in the 2004 version --
It no longer monitors SecureNAT clients. We need SNAT monitoring for
our wireless hotspot (ad-hoc) clients.
Our library and youth center really enjoy the product. You are able to
redirect the client to another site if they try to access a site in a
blocked category. Our Adult/Sexually Explicit rule redirect them to
Barney, teletubbies, pooh, and a list of other kid sites. We must
manually change the redirect site on the rule. It would be cool if
SurfControl could alternate between selected sites.
The time feature is an excellent feature for our library. Before we
deployed SurfControl, library patrons would not always logoff at the set
time of 30 minutes before closing. ISA, too feature a time limit
(schedule) -- but in 1 hour increments. SurfControl allows a scheduled
time in 1-minute increments. Exactly 30 minutes before library closing,
SurfControl redirect the client to an internal web page with the hours
of Internet access hours. SurfControl redirect the wireless clients
redirected 15 minutes before closing.
SurfControl is AD aware which makes it very easy to assign rules to
groups, users, etc.
SurfControl can monitor either users or machines -- we monitor machines.
The library requires 300 user accounts used over 30 thin-clients. These
thin-clients use two Terminal servers, which we monitor.
We really like the product -- just renewed our category subscription,
and tech support for two years. SurfControl is constantly updating
their category, and our subscription allows SurfControl to download the
updates at our leisure.
Tech support: I have been working with them for the past few months
regarding the SNAT monitoring. I have been in queue (hold - handsfree)
for the past hour on this very issue. I can recall when we first
purchased this product tech support was much quicker on answering calls.
Their customer base must have gone up significantly. However, when you
are finally out of queue, tech support will get you up and running.
Nice product -- slow tech support.
greg
-----Original Message-----
From: ISAserver.org [mailto:info@xxxxxxxxxxxxx]
Sent: Tuesday, March 15, 2005 9:05 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISAserver.org - Review of SurfControl Web Filter 5.0
for ISA Server 2004
http://www.ISAserver.org
ISAserver.org - RealTime Article Update
Hi ISAlist,
Title: Review of SurfControl Web Filter 5.0 for ISA Server 2004
Author: Thomas Shinder
Summary: As good as the ISA firewall's built-in Web site access control
features are, you can always do better. To squeeze out the last ounce of
stateful application layer inspection protection for Web connections,
you'll need a comprehensive and smart add-on. We tested SurfControl Web
Filter for ISA Server 2004 and found it a stalwart partner in pumping up
the ISA firewall security to the next level.
Link:
http://www.ISAserver.org/articles/Review-SurfControl-Web-Filter-ISA-Serv
er-2004.html
Visit the Subscription Management
(http://newsletter.isoftmarketing.com/) section to unsubscribe.
ISAserver.org is in no way affiliated with Microsoft Corp.
For sponsorship information, contact us at advertising@xxxxxxxxxxxxx
Copyright (c) ISAserver.org 2005. All rights reserved.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregory.crockett@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
