[THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and domain names
- To: <thin@xxxxxxxxxxxxx>
- Date: Wed, 29 Oct 2003 12:02:46 -0900
We run surf control on a separate box and it does a great job of enforcing
rules on our Citrix farm by user.
Dave Arnold
Mercury Data Group, Inc.
(907) 274-1510 x19
-----Original Message-----
From: TheThin [mailto:TheThin@xxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, October 29, 2003 11:34 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and
domain names
Websense works great. The downside is that it can't tell each individual user
apart on terminal server/citrix. Most of these products use the MAC address of
the machine at the firewall level and then find a way to correlate the MAC
address to the logged in user (using an authetication applet or some other
method) to apply different policies for different users.
Websense does this seamlessly somehow without a client side app which is nice,
(there is server side piece that runs under a domain admin account, that goes
out and queries the workstation) but with multi-users coming from a single MAC
address ala citrix it can't figure out who is who. Pearl recently came out
and their stuff supposedly can tell the difference between individual users on
Citrix. This is their strongest selling point to Citrix shops. I haven't
used it, but the brochures look pretty solid, and I would investigate it if you
have a heavy citrix presence.
Also, don't fool yourself into thinking you can setup the same filtering for
all users. The president of the company WILL want more access than you will
want to give secretaries. It may not be democratic but if you are in a
sizeable organization (more than say 100 people) you will need to have
different policies for different groups. I have done two Websense installs
recently, and the post tweaking for groups was considerable. Websense really
is great, controlling not just websites, but chat protocols (MSN Messenger, AIM
etc.) and other generic internet protocls, (FTP, GOPHER, etc.) When used with
a decent firewall it really does well and you won't have to keep trying to
update your firewall to keep out the IM and other junk softwares.
-----Original Message-----
From: Angus Macdonald [mailto:Angus.Macdonald@xxxxxxxxxxxxxxxxxxx]
Posted At: Wednesday, October 29, 2003 9:10 AM
Posted To: TheThin
Conversation: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's
and domain names
Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and
domain names
That's one of the reasons we'll be moving to WebMarshall.
That and a £5000 saving etc etc
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]
Sent: 29 October 2003 13:47
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and
domain names
Mallesons Stephen Jaques
www.mallesons.com
Confidential communication
surf control has a few issues on isa server, namely handle leaks, i think we
are on the 4th version in 12 months now..
John Rowlandson
Technical Support Specialist
Mallesons Stephen Jaques
Sydney
T +61 2 9296 3653
F +61 2 9296 3999
john.rowlandson@xxxxxxxxxxxxx
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]
Sent: Thursday, 30 October 2003 12:44 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: [OT - possibly] blocking/filtering unsuitable URL's and
domain names
There are tons of products for this. The only times I have done it though I
used Surf Control. Worked like a champ, can do web and e-mail filtering, has
rule based filtering etc. I liked it but sometimes its overkill depending on
what you want.
Ron Oglesby
Senior Technical Architect
RapidApp
Office 312.372.7188
Mobile 815.325.7618
email roglesby@xxxxxxxxxxxx
-----Original Message-----
From: Andy Lalaguna [mailto:Andy.lalaguna@xxxxxxxxxxxx]
Sent: Wednesday, October 29, 2003 7:06 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] [OT - possibly] blocking/filtering unsuitable URL's and domain
names
Folks,
apologies, I know this has come up under a number of different discussions, for
the life of me I can't find it in the archives.
How does everyone block unsuitable URL's and/or domain names to filter out
unsuitable material at firewalls and mail servers? There had been a mention of
a listing on one of the anti-virus manufacturers sites as a starting point...
Any help greatfully appreciated.
Best wishes, andyL
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment
http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
