3

We have ~200 users and are currently using Blue Coat to filter web content. Basically we just block things like porn and streaming media. Our contract is coming up and the device is End Of Life, so we are looking for possible alternatives. I know that WebSense is popular, but we'd prefer something a little cheaper.

Have you used anything that you would recommend?

Andy May
  • 919
  • 10
  • 16
  • I must admit I've never used anything like that. Ever. In a small business especially, if people aren't doing their jobs, they should go away. Conversely, if someone does their job better while listening to Pandora, why would I want to interfere with that? – pjz Feb 23 '11 at 16:51
  • There are many reasons you'd want to filter content... blocking porn in popup ads is one. We're asked to filter content by the managers, not as some "IT Gods". As for the Pandora, bandwidth is expensive. Why should we pay lots of money for more T1s for you to listen to streaming music and watch NCAA basketball? Buy an iPod. – Andy May Feb 23 '11 at 16:51
  • Pandora might run beautifully in your network, but it would clog mine. – hsym Feb 23 '11 at 16:51

5 Answers5

2

We use an Astaro Security Gateway device in our office and it works very well. It is essentially a linux server with a bunch of open source apps tied together with a proprietary web-based management front-end. You can purchase a license for just their software, or you can buy a packaged/branded server from them with everything pre-loaded and ready to go. They offer maintenance plans which continually update filtering rules and also covers software updates. It does firewall, nat routing, content filtering, ids, e-mail filtering, vpn, etc. I've found their support to be very helpful the few times I've needed a hand with something. They update the software fairly regularly and continue to add new features and correct obscure problems that anyone reports. Overall a great product designed specifically for what you're trying to do. I am not tied to Astaro in any way aside from being a satisfied customer.

Justin Scott
  • 8,748
  • 1
  • 27
  • 39
1

Check out Untangle.

I can't post links, but it is at untangle dot com

Open source, can run on inexpensive or used hardware...

I'm using it at a couple of small businesses and it works great..antivirus, antispam, firewall, protocoal control, port forwardng, etc...

@pjz, it isn't a matter of them doing their jobs, its a matter of helping reduce risk to technology resources connected to a horribly dangerous internet!

  • +1 for Untangle. It's free, easy to set up and administer. The only downside that I have with it is that I can't whitelist some websites for a certain IP addresses (or maybe it's included in the premium account, sorry I don't remember). Example: our marketing dept needs access to Twitter, but when I whitelist their IP addresses, it unblocks everything for them. – hsym Feb 23 '11 at 16:28
  • +1 for Untangle. Cheep and easy to administrate. And to answer i.am.intern. With the paid Policy manager you can create "racks" for users or groups. – WebFooL May 11 '12 at 16:45
  • Welcome to Server Fault! Please read our [faq] in particular [May I promote products or websites I am affiliated with here?](http://serverfault.com/faq#promotion). – user9517 May 11 '12 at 16:48
0

I'm biased, I work for SmoothWall, www.smoothwall.net, but we do offer a cost-effective alternative to the two products you suggest - both of which, I might add, are decent kit!

Tom

Tom Newton
  • 4,021
  • 2
  • 23
  • 28
0

My company uses SQUID with blacklists, but OpenDNS is VERY easy to use and configure...and FREE.

cop1152
  • 2,626
  • 3
  • 21
  • 32
0

squid + black list with linux as router with iptables is tha best solution

Soon we bundling same with nice webuser interface .