Content Filtering?

[Vyper28]

Does anyone have any suggestions for software or hardware that can provide flexible content filtering for a server enviroment. (Windows server 2008).

I have mcafee SAAS but the problem is some of the users are doing things not really "malicious" but wasteful. I need something I can block.. for example.. certain game forums, facebook, instagram..

I was thinking about using a hosts file on the server since it acts as the DNS server, but I was hoping for something a little easier to configure, with a UI (web based?), so they can learn to add to the list as well.

 

[YeOldeStonecat]

Best to separate this duty from the "server" and put it at the edge, a business grade UTM appliance (instead of a plain router). Many devices that do this....such as Sonicwalls...Watchguards...Ciscos, Netgear even has some. To better appliances that run on distros based on *ix.....such as Untangle, ClearOS, Endian, Astaro.

 

[Vyper28]

They do have a sonicwall TZ100. Do you know if they need to subscribe to premium content filtering in order to invoke custom rules?

 

[pceinc]

The TZ series all use the same CFS service.

Out of curiosity, what kind of bandwidth does this customer have? What is the throughput on the TZ100? It's rated for 25Mbps. I've seen the Total Secure Suite chop 20Mbps off of a 50Mbps account on a TZ210. I run a TZ205 here and don't have this issue. Getting the full 50.

 

[unclemarv]

SonicWall plus OpenDNS. We use both... OpenDNS is the big umbrella so that when we bypass certain users with the SonicWall, OpenDNS still filters stuff like porn, adware, etc.

 

[HCHTech]

They do have a sonicwall TZ100

You're in luck (not)! The TZ100 went end of life two weeks ago on 11/15/17. So while you can do this with a current license of the CGSS, it'll only work as long as your license lasts, because you can't renew that license anymore. It's past time to upgrade that unit anyway. The current equivalent is the SOHO model, but stepping up to the TZ300 would give you more throughput.

 

[YeOldeStonecat]

Wow..old thread that got necro bumped! The "bumpers" post is missing..think it was a sales person from a certain brand...saw a bunch of old threads bumped with that brand mentioned.

 

[HCHTech]

Ha - never even noticed the date. Oops.

 

[masseym]

We use OpenDNS --> Now Cisco Umbrella. $2.70 per endpoint, but it works.

 

[Rafael Segnini]

Hi, you should try PI-HOLE, for small office is very usefull, you can install on a VM and redirect all DNS to PI-HOLE, you can set a blacklist and wihtelist, very simple and most important IT WORKS.