ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Content filtering with granular settings

    Scheduled Pinned Locked Moved IT Discussion
    content filtering
    37 Posts 17 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • dafyreD
      dafyre @CCWTech
      last edited by

      @CCWTech said in Content filtering with granular settings:

      @DustinB3403 said in Content filtering with granular settings:

      @CCWTech said in Content filtering with granular settings:

      @DustinB3403 said in Content filtering with granular settings:

      Why the dumb request to block this content from just 1 workstation?

      Not 1 workstation.

      40+ workstations, some workstations would be locked down more than others.

      Arbitrary requirements are arbitrary.

      Not arbitrary in any way.

      One group of workstations may be locking down social media sites, other groups may allow them.

      This may be cost prohibitive for the client but that's what they want. The ability to assign different groups of computers to different settings.

      Again, that can be done using a Squid Proxy or some other proxy server.

      1 Reply Last reply Reply Quote 1
      • 1
        1337
        last edited by

        What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

        dbeatoD 1 Reply Last reply Reply Quote 2
        • AmbarishrhA
          Ambarishrh
          last edited by

          You could try cisco umbrella (previously opendns) https://umbrella.cisco.com/products/packages or mimecast web security https://www.mimecast.com/products/web-security/

          I've previously used untangle and clearos for these as well

          1 Reply Last reply Reply Quote 1
          • syko24S
            syko24
            last edited by

            Nxfilter is a decent and inexpensive option. You can be granular by IP address or by username. All filtering is done using dns.

            https://nxfilter.org/p3/

            1 Reply Last reply Reply Quote 1
            • dbeatoD
              dbeato @1337
              last edited by

              @Pete-S said in Content filtering with granular settings:

              What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

              Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

              CCWTechC 1 Reply Last reply Reply Quote 1
              • black3dynamiteB
                black3dynamite
                last edited by

                pfSense with squid and squidguard packages worked well when I last used it.

                1 Reply Last reply Reply Quote 3
                • JaredBuschJ
                  JaredBusch
                  last edited by

                  The only reason to do something like this is it these are public computers. If these are users in an office setting then the problem is management needs to discipline employees.

                  CCWTechC 1 Reply Last reply Reply Quote 2
                  • CCWTechC
                    CCWTech @JaredBusch
                    last edited by

                    @JaredBusch said in Content filtering with granular settings:

                    The only reason to do something like this is it these are public computers. If these are users in an office setting then the problem is management needs to discipline employees.

                    I agree. I think they are going to end up with something like PiHole when they hear the cost of doing what they actually want to do.

                    1 Reply Last reply Reply Quote 0
                    • CCWTechC
                      CCWTech @dbeato
                      last edited by

                      @dbeato said in Content filtering with granular settings:

                      @Pete-S said in Content filtering with granular settings:

                      What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

                      Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

                      Unifi USG

                      dbeatoD 1 Reply Last reply Reply Quote 1
                      • dbeatoD
                        dbeato @CCWTech
                        last edited by

                        @CCWTech said in Content filtering with granular settings:

                        @dbeato said in Content filtering with granular settings:

                        @Pete-S said in Content filtering with granular settings:

                        What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

                        Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

                        Unifi USG

                        Gotcha, that does not do content filtering.

                        1 Reply Last reply Reply Quote 1
                        • davide.bonavitaD
                          davide.bonavita
                          last edited by davide.bonavita

                          I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                          JaredBuschJ RojoLocoR 2 Replies Last reply Reply Quote 1
                          • JaredBuschJ
                            JaredBusch @davide.bonavita
                            last edited by JaredBusch

                            @davide-bonavita said in Content filtering with granular settings:

                            I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                            Watchguard purchased Strongarm.io (a competitor to Cisco Umbrella) to get this functionality.

                            1 Reply Last reply Reply Quote 3
                            • RojoLocoR
                              RojoLoco @davide.bonavita
                              last edited by

                              @davide-bonavita said in Content filtering with granular settings:

                              I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                              They do, but content filtering requires an additional yearly subscription to use it.

                              davide.bonavitaD 1 Reply Last reply Reply Quote 1
                              • dbeatoD
                                dbeato
                                last edited by

                                Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                travisdh1T 1 Reply Last reply Reply Quote 1
                                • travisdh1T
                                  travisdh1 @dbeato
                                  last edited by

                                  @dbeato said in Content filtering with granular settings:

                                  Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                  I can't stand Sophos firewalls.... guess what they use at work.

                                  No prizes.

                                  dbeatoD 1 Reply Last reply Reply Quote 0
                                  • dbeatoD
                                    dbeato @travisdh1
                                    last edited by

                                    @travisdh1 said in Content filtering with granular settings:

                                    @dbeato said in Content filtering with granular settings:

                                    Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                    I can't stand Sophos firewalls.... guess what they use at work.

                                    No prizes.

                                    Yeeez, what can't you stand about them?

                                    travisdh1T 1 Reply Last reply Reply Quote 0
                                    • D
                                      dave_c
                                      last edited by

                                      DNSFilter with Roaming Client deployment would work. It is one of their use cases: https://www.dnsfilter.com/blog/everything-you-need-to-know-about-roaming-clients/

                                      1 Reply Last reply Reply Quote 1
                                      • davide.bonavitaD
                                        davide.bonavita @RojoLoco
                                        last edited by

                                        @RojoLoco actually they require a subscription even to switch them on 😄

                                        1 Reply Last reply Reply Quote 1
                                        • travisdh1T
                                          travisdh1 @dbeato
                                          last edited by

                                          @dbeato said in Content filtering with granular settings:

                                          @travisdh1 said in Content filtering with granular settings:

                                          @dbeato said in Content filtering with granular settings:

                                          Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                          I can't stand Sophos firewalls.... guess what they use at work.

                                          No prizes.

                                          Yeeez, what can't you stand about them?

                                          The subscription, and the over-complication of settings by making everything objects instead of ip addresses and ports. Takes 5x to long finding what current settings are, let alone change something.

                                          wrx7mW 1 Reply Last reply Reply Quote 1
                                          • brandon220B
                                            brandon220
                                            last edited by

                                            As far as Sophos goes.... my opinion is that the SG is a lot easier to navigate and set up than the XG. That being said - they both work well. You can download the XG software and try it out for free with full functionality.

                                            1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 2 / 2
                                            • First post
                                              Last post