We run surf control on a separate box and it does a great job of enforcing rules on our Citrix farm by user. Dave Arnold Mercury Data Group, Inc. (907) 274-1510 x19 -----Original Message----- From: TheThin [mailto:TheThin@xxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, October 29, 2003 11:34 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names Websense works great. The downside is that it can't tell each individual user apart on terminal server/citrix. Most of these products use the MAC address of the machine at the firewall level and then find a way to correlate the MAC address to the logged in user (using an authetication applet or some other method) to apply different policies for different users. Websense does this seamlessly somehow without a client side app which is nice, (there is server side piece that runs under a domain admin account, that goes out and queries the workstation) but with multi-users coming from a single MAC address ala citrix it can't figure out who is who. Pearl recently came out and their stuff supposedly can tell the difference between individual users on Citrix. This is their strongest selling point to Citrix shops. I haven't used it, but the brochures look pretty solid, and I would investigate it if you have a heavy citrix presence. Also, don't fool yourself into thinking you can setup the same filtering for all users. The president of the company WILL want more access than you will want to give secretaries. It may not be democratic but if you are in a sizeable organization (more than say 100 people) you will need to have different policies for different groups. I have done two Websense installs recently, and the post tweaking for groups was considerable. Websense really is great, controlling not just websites, but chat protocols (MSN Messenger, AIM etc.) and other generic internet protocls, (FTP, GOPHER, etc.) When used with a decent firewall it really does well and you won't have to keep trying to update your firewall to keep out the IM and other junk softwares. -----Original Message----- From: Angus Macdonald [mailto:Angus.Macdonald@xxxxxxxxxxxxxxxxxxx] Posted At: Wednesday, October 29, 2003 9:10 AM Posted To: TheThin Conversation: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names That's one of the reasons we'll be moving to WebMarshall. That and a £5000 saving etc etc -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Sent: 29 October 2003 13:47 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names Mallesons Stephen Jaques www.mallesons.com Confidential communication surf control has a few issues on isa server, namely handle leaks, i think we are on the 4th version in 12 months now.. John Rowlandson Technical Support Specialist Mallesons Stephen Jaques Sydney T +61 2 9296 3653 F +61 2 9296 3999 john.rowlandson@xxxxxxxxxxxxx -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Sent: Thursday, 30 October 2003 12:44 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names There are tons of products for this. The only times I have done it though I used Surf Control. Worked like a champ, can do web and e-mail filtering, has rule based filtering etc. I liked it but sometimes its overkill depending on what you want. Ron Oglesby Senior Technical Architect RapidApp Office 312.372.7188 Mobile 815.325.7618 email roglesby@xxxxxxxxxxxx -----Original Message----- From: Andy Lalaguna [mailto:Andy.lalaguna@xxxxxxxxxxxx] Sent: Wednesday, October 29, 2003 7:06 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] [OT - possibly] blocking/filtering unsuitable URL's and domain names Folks, apologies, I know this has come up under a number of different discussions, for the life of me I can't find it in the archives. How does everyone block unsuitable URL's and/or domain names to filter out unsuitable material at firewalls and mail servers? There had been a mention of a listing on one of the anti-virus manufacturers sites as a starting point... Any help greatfully appreciated. Best wishes, andyL ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor Pearl Software Internet Monitoring, Filtering, and Control Solutions Enabling User & Group Level Oversight & Access Policies Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm