ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Content filtering with granular settings

    Scheduled Pinned Locked Moved IT Discussion
    content filtering
    37 Posts 17 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • AmbarishrhA
      Ambarishrh
      last edited by

      You could try cisco umbrella (previously opendns) https://umbrella.cisco.com/products/packages or mimecast web security https://www.mimecast.com/products/web-security/

      I've previously used untangle and clearos for these as well

      1 Reply Last reply Reply Quote 1
      • syko24S
        syko24
        last edited by

        Nxfilter is a decent and inexpensive option. You can be granular by IP address or by username. All filtering is done using dns.

        https://nxfilter.org/p3/

        1 Reply Last reply Reply Quote 1
        • dbeatoD
          dbeato @1337
          last edited by

          @Pete-S said in Content filtering with granular settings:

          What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

          Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

          CCWTechC 1 Reply Last reply Reply Quote 1
          • black3dynamiteB
            black3dynamite
            last edited by

            pfSense with squid and squidguard packages worked well when I last used it.

            1 Reply Last reply Reply Quote 3
            • JaredBuschJ
              JaredBusch
              last edited by

              The only reason to do something like this is it these are public computers. If these are users in an office setting then the problem is management needs to discipline employees.

              CCWTechC 1 Reply Last reply Reply Quote 2
              • CCWTechC
                CCWTech @JaredBusch
                last edited by

                @JaredBusch said in Content filtering with granular settings:

                The only reason to do something like this is it these are public computers. If these are users in an office setting then the problem is management needs to discipline employees.

                I agree. I think they are going to end up with something like PiHole when they hear the cost of doing what they actually want to do.

                1 Reply Last reply Reply Quote 0
                • CCWTechC
                  CCWTech @dbeato
                  last edited by

                  @dbeato said in Content filtering with granular settings:

                  @Pete-S said in Content filtering with granular settings:

                  What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

                  Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

                  Unifi USG

                  dbeatoD 1 Reply Last reply Reply Quote 1
                  • dbeatoD
                    dbeato @CCWTech
                    last edited by

                    @CCWTech said in Content filtering with granular settings:

                    @dbeato said in Content filtering with granular settings:

                    @Pete-S said in Content filtering with granular settings:

                    What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

                    Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

                    Unifi USG

                    Gotcha, that does not do content filtering.

                    1 Reply Last reply Reply Quote 1
                    • davide.bonavitaD
                      davide.bonavita
                      last edited by davide.bonavita

                      I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                      JaredBuschJ RojoLocoR 2 Replies Last reply Reply Quote 1
                      • JaredBuschJ
                        JaredBusch @davide.bonavita
                        last edited by JaredBusch

                        @davide-bonavita said in Content filtering with granular settings:

                        I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                        Watchguard purchased Strongarm.io (a competitor to Cisco Umbrella) to get this functionality.

                        1 Reply Last reply Reply Quote 3
                        • RojoLocoR
                          RojoLoco @davide.bonavita
                          last edited by

                          @davide-bonavita said in Content filtering with granular settings:

                          I think the Watchguard firewalls can do this, you can create policies per user or per computer with very granular content filtering (even for https connections)

                          They do, but content filtering requires an additional yearly subscription to use it.

                          davide.bonavitaD 1 Reply Last reply Reply Quote 1
                          • dbeatoD
                            dbeato
                            last edited by

                            Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                            travisdh1T 1 Reply Last reply Reply Quote 1
                            • travisdh1T
                              travisdh1 @dbeato
                              last edited by

                              @dbeato said in Content filtering with granular settings:

                              Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                              I can't stand Sophos firewalls.... guess what they use at work.

                              No prizes.

                              dbeatoD 1 Reply Last reply Reply Quote 0
                              • dbeatoD
                                dbeato @travisdh1
                                last edited by

                                @travisdh1 said in Content filtering with granular settings:

                                @dbeato said in Content filtering with granular settings:

                                Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                I can't stand Sophos firewalls.... guess what they use at work.

                                No prizes.

                                Yeeez, what can't you stand about them?

                                travisdh1T 1 Reply Last reply Reply Quote 0
                                • D
                                  dave_c
                                  last edited by

                                  DNSFilter with Roaming Client deployment would work. It is one of their use cases: https://www.dnsfilter.com/blog/everything-you-need-to-know-about-roaming-clients/

                                  1 Reply Last reply Reply Quote 1
                                  • davide.bonavitaD
                                    davide.bonavita @RojoLoco
                                    last edited by

                                    @RojoLoco actually they require a subscription even to switch them on 😄

                                    1 Reply Last reply Reply Quote 1
                                    • travisdh1T
                                      travisdh1 @dbeato
                                      last edited by

                                      @dbeato said in Content filtering with granular settings:

                                      @travisdh1 said in Content filtering with granular settings:

                                      @dbeato said in Content filtering with granular settings:

                                      Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

                                      I can't stand Sophos firewalls.... guess what they use at work.

                                      No prizes.

                                      Yeeez, what can't you stand about them?

                                      The subscription, and the over-complication of settings by making everything objects instead of ip addresses and ports. Takes 5x to long finding what current settings are, let alone change something.

                                      wrx7mW 1 Reply Last reply Reply Quote 1
                                      • brandon220B
                                        brandon220
                                        last edited by

                                        As far as Sophos goes.... my opinion is that the SG is a lot easier to navigate and set up than the XG. That being said - they both work well. You can download the XG software and try it out for free with full functionality.

                                        1 Reply Last reply Reply Quote 1
                                        • SmithErickS
                                          SmithErick
                                          last edited by

                                          DNSfilter.com, agent install.

                                          1 Reply Last reply Reply Quote 1
                                          • notverypunnyN
                                            notverypunny
                                            last edited by notverypunny

                                            We used to do with with an iPrism / edgewave / St Bernard appliance.

                                            https://www.edgewave.com/products/iprism-web-security/

                                            1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 2 / 2
                                            • First post
                                              Last post