Angelo_
The Network Guy
Premium
join:2002-06-18 | whats your traffic policies
what i mean is for external traffic what policies do you employ (ie qos on utorrent etc), do you have a 3 strike rule for content? |
|
gpctexas
join:2004-02-10
Odessa, TX
1 edit | 5 packets of any p2p software will kick you off the internet for 15 mins by our ids device  |
|
anon
@ptd.net | gpc what app/firewall do you use to do that? |
|
gpctexas
join:2004-02-10
Odessa, TX | It is a tippingpoint 50.
We have 3 of these.
it is related to these on this page.
»www.tippingpoint.com/products_tp···330.html |
|
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
 ·Site5.com
 ·AT&T Midwest
 ·Comcast
1 edit | reply to Angelo_
We just block the traffic except for whats needed. The workstations are locked down as well to prevent people from installing software that isn't legit. That covers us very well.
We also use OpenDNS for category filtering too. Not the best, but its free and its a small enough company where we can manage with it.
--
My domain - Nightfall.net |
|
tomdlgns
join:2003-03-21
Chicago, IL
| said by Nightfall  :We just block the traffic except for whats needed. The workstations are locked down as well to prevent people from installing software that isn't legit. That covers us very well. We also use OpenDNS for category filtering too. Not the best, but its free and its a small enough company where we can manage with it. have you seen the new openDNS enterprise and deluxe packages?
costs a little money, but i think it is worth it. |
|
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·Site5.com
·AT&T Midwest
·Comcast
| said by tomdlgns :said by Nightfall :We just block the traffic except for whats needed. The workstations are locked down as well to prevent people from installing software that isn't legit. That covers us very well. We also use OpenDNS for category filtering too. Not the best, but its free and its a small enough company where we can manage with it. have you seen the new openDNS enterprise and deluxe packages? costs a little money, but i think it is worth it. Meh....it might.
I would like to evaluate a package first before I did it. The category blocking is not as robust as if you had a websense. I think thats the only catching point. If we are going to be spending $2000 a year, then we better get good filtering. I can spend $4000 on the hardware and then spend $600 on maintenance per year on a Websense and have much much better performance.
--
My domain - Nightfall.net |
|
tomdlgns
join:2003-03-21
Chicago, IL
| said by Nightfall :said by tomdlgns :said by Nightfall :We just block the traffic except for whats needed. The workstations are locked down as well to prevent people from installing software that isn't legit. That covers us very well. We also use OpenDNS for category filtering too. Not the best, but its free and its a small enough company where we can manage with it. have you seen the new openDNS enterprise and deluxe packages? costs a little money, but i think it is worth it. Meh....it might. I would like to evaluate a package first before I did it. The category blocking is not as robust as if you had a websense. I think thats the only catching point. If we are going to be spending $2000 a year, then we better get good filtering. I can spend $4000 on the hardware and then spend $600 on maintenance per year on a Websense and have much much better performance. i agree.
i should have mentioned that for me, i have multiple networks.
right now, each network has its own 3,000 dollar firewall with web filtering as an added 600 dollar package.
if i went with open DNS enterprise, i would pay 1 fee of 2 or 3 thousand but they told me i could add as many networks as i wanted.
right off the bat, i would be saving if i switched. |
|
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·Site5.com
·AT&T Midwest
·Comcast
| said by tomdlgns :i agree. i should have mentioned that for me, i have multiple networks. right now, each network has its own 3,000 dollar firewall with web filtering as an added 600 dollar package. if i went with open DNS enterprise, i would pay 1 fee of 2 or 3 thousand but they told me i could add as many networks as i wanted. right off the bat, i would be saving if i switched. There really is no comparison, you are right on that.
Websense is excellent if you want top notch filtering that is updated frequently. OpenDNS has a good product, but not $2000 good thats for sure. Especially $2000 per year. If OpenDNS wants to compete with Websense, some things have to happen.
I want to see their category filtering be MUCH better than it is now. The nudity/porn site filter only catches about 30% of the sites out there. If I can defeat it within 3 minutes, whats the point?
Malware category filtering is a good addon, but I bet there same lack of filtering issues are going to hit with that too.
Lastly, you are at the mercy of thousands of users who report a site which has its good and bad points.
OpenDNS would be much better off charging say $500 per year for the filtering of enterprise edition. Its just too expensive at 2k.
--
My domain - Nightfall.net |
|
tomdlgns
join:2003-03-21
Chicago, IL
| said by Nightfall :said by tomdlgns :i agree. i should have mentioned that for me, i have multiple networks. right now, each network has its own 3,000 dollar firewall with web filtering as an added 600 dollar package. if i went with open DNS enterprise, i would pay 1 fee of 2 or 3 thousand but they told me i could add as many networks as i wanted. right off the bat, i would be saving if i switched. There really is no comparison, you are right on that. Websense is excellent if you want top notch filtering that is updated frequently. OpenDNS has a good product, but not $2000 good thats for sure. Especially $2000 per year. If OpenDNS wants to compete with Websense, some things have to happen. I want to see their category filtering be MUCH better than it is now. The nudity/porn site filter only catches about 30% of the sites out there. If I can defeat it within 3 minutes, whats the point? Malware category filtering is a good addon, but I bet there same lack of filtering issues are going to hit with that too. Lastly, you are at the mercy of thousands of users who report a site which has its good and bad points. OpenDNS would be much better off charging say $500 per year for the filtering of enterprise edition. Its just too expensive at 2k. i agree 100%
with that being said, it is the best free solution out there for sure.
of course, there are more reasons that i pay to have sonicwall firewalls.
i don't want to get into that by thread jacking. |
|
cypherstream
Looking forward to the future of things.
Premium,MVM
join:2004-12-02
Reading, PA
clubs:
| reply to Angelo_
Barracuda Web Firewall
»www.barracudanetworks.com/ns/pro···view.php
Paired with OpenDNS as a backup / double layer protection.
I have to say it works great. Have it integrated with LDAP so we can give different departments various levels of Internet Access.
I used Websense at my last job and loved it. I'd take Websense back any day, but this is in place and working well for much less cost. |
|
smunro622
join:2006-02-15
Madison Heights, MI | reply to Angelo_
we use packet fence, kicks off the network for any one of the numerous violations and why it did... |
|
Somnambul33t
L33t.
Premium
join:2002-12-05
Mullica Hill, NJ
clubs: | reply to Angelo_
we use a barracuda appliance and SecureSchool |
|
va176thunder
join:2001-09-14
Columbus, OH
clubs:
| reply to Angelo_
We use Bluecoats with their webfilter. We used to use Websense, but they became too expensive. Access to the Internet is denied by default, and allowed by exception. The proxies query different LDAP groups for controlling access to content (like Blogging, Internet e-mail, etc...) - your userid had to be added before you can access that content type. As an added layer, we don't advertise a default route, so you either have to go through the proxies or convince us to inject routes for what you are trying to access.
--
and the hits just keep on coming......... |
|
TearAbite
join:2001-07-25
Rancho Cucamonga, CA
·surpasshosting
·Charter Pipeline
| reply to Angelo_
inappropriate content issues are supervisor problems and an HR issue - not an IT issue. Block what you can or what HR/Management tells you too and let them worry about the rest.
--
Win yerself an Amazon Kindle: »grownupgeek.com/win-amazon-kindle |
|
