I'm after either a hardware or software solution for a small (50-100 user) client. Ideally would like to be able to set policies on AD security groups and users. Need to be able to have policies to deny downloads by file type as well as blocking sites either explicitly or by category.

A software solution would need to run on W2K8 (they only have the one server ATM) or if I sell them some more kit I guess W2K3. Not averse to a linux solution. Another possiblity would be a virtual appliance running under VMWare server or similar. We use Websense at work and other clients use WebMarshall. Any others I should be looking at?

Hardware: Not my area at all so don't really know what's out there.

What about hosted solutions such as MessageLabs? Do they work?

TIA

Mark

 

have a look at this

Appliance Gateway Solutions | intY The Internet Security Company

used to install them in schools/colleges a few years ago

quite a good "black box" solution

 

Thanks for that

 

We use Bloxx hardware appliances. I love them, the filtering and overrides are superb.

Darren

 

Thanks Darren. Looks like they are available over here so will take a closer look.

 

we use websense which is software based. works with lots of firewalls inc. isa

 

the problem with something like websense is that you are paying twice (but it is quite good)

for the websense -- (which basically leveredges the functionality of ISA)

and ISA

hence the simplicity of an "appliance"

 

Update:
I emailed Bloxx for more info on a Saturday evening and got a call from their man in APAC at 0730 the following morning. Yes, got a call on a Sunday. Anyway, Bloxx have only been in OZ for 12 months or so and have no presence in WA so there could be an opportunity for us to become a reseller. The device looks very capable and on the face of it just what the client is after.

following some research I have found that Websense and other software solutions would, in the client's environment (education), be cost prohibitive due to the per user licensing model. Hosted solutions such as MessageLabs are still licensedby user but have a more attractive offering for colleges and the like. Still much more expensive that the Bloxx.

There's been another couple of hardware options put to me: A Bluecoat ProxySG 210 and something from an outfit called Fortinet. Bluecoat I know about but does anyone have any experience of the latter? Their offerings seem too good to be true price-wise.

Thanks

Mark