Best web filtering solution for the workplace?

[NathanBWF]

I'd like to implement web filtering here at worked being as how the internet is being heavily abused. I've checked out a few different possibilities such as Websense, some client based apps like Cyber Patrol, and would like to go with St.Bernard's iPrism unfortunately the powers that be don't want to fork out that much money.

Just wondering what everyone else uses, and if there is something else similar to Websense/St.Bernard that is a bit less money?

We have about 60 computers on the network, and I'd like something that is more server/hardware based instead of client based to minimize administrative overhead...

 

[NathanBWF]

24hr bump...

No one filters/monitors their company's internet usage?!?

 

[Homerboy]

we use CyBlock SA
not a single complaint about it

 

[NathanBWF]

Originally posted by: Homerboy
we use CyBlock SA
not a single complaint about it

We don't run a MS server/client network nor do we have a Microsoft ISA server.

 

[NathanBWF]

No other suggestions for a non Win2k/2k3 environment?

 

[tw1164]

dansguardian & squid?

 

[n0cmonkey]

If you aren't using Windows, what are you using?

 

[NathanBWF]

Originally posted by: n0cmonkey
If you aren't using Windows, what are you using?

We are using Windows...just not setup in a Client/Server network. The LAN consists of basically 3 large workgroups...

i.e. No DC's, no logging into a domain, etc...

 

[Patt]

Our environment runs websense ... but it isn't configured very well, so it is easy to get around, say, to ATOT

 

[pcthuglife]

I setup a linux gateway running squid and squidguard at home and at work. It works well and let's me filter out any content I want. You say you have 3 large workgroups, do they connecto to the web through one gateway or do you have 3 locations with 3 gateways?

 

[nweaver]

I use ntop and pink slips to control internet usage

 

[kevnich2]

You have SIXTY windows computers on a network WITHOUT a dc and your worrying about administrative overhead???

 

[NathanBWF]

Originally posted by: pcthuglife
I setup a linux gateway running squid and squidguard at home and at work. It works well and let's me filter out any content I want. You say you have 3 large workgroups, do they connecto to the web through one gateway or do you have 3 locations with 3 gateways?

3 workgroups, 1 gateway.

 

[pcthuglife]

if you can dedicate an old crappy computer to be the gateway, squid is pretty easy to setup and does a good job at filter content. to give you an example here's how i have mine setup:
- admin group
- user group
- users can't download exe's, bat's, com's, zip's etc from unknown sites
- users are allowed to download restricted file types from allowed sites
- admin's have free access to the web, but traffic is logged
- the proxy is "transparent" so there's no way to bypass it other than using a dial up connection.
- i use a "squidguard" add-on to filter url's

I chose suse 9.3 for my proxy because it provides an easy to use GUI to set everything up. Well, at least the routing and firewall part. Just about every linux distribution cames with squid as one of the default packages. If this sounds like what you need you can do some research at http://www.squid-cache.org/