+ Post New Thread
Page 5 of 6 FirstFirst 123456 LastLast
Results 61 to 75 of 80
Internet Related/Filtering/Firewall Thread, Which Webfilter? in Technical; ...
  1. #61

    Join Date
    Oct 2005
    Location
    mnah mnah!
    Posts
    1,124
    Thank Post
    274
    Thanked 227 Times in 173 Posts
    Rep Power
    113
    Quote Originally Posted by Watty08 View Post
    We have just had a quote for 10k for smoothwall and thats without their hardware. We used RM Smart Cache before which was wasn't good but cost £490 pa. Its going to be a hard task pursuading the governors to stump up that much more!
    Presumably, if the governors don't want to spend that much, they know of a suitable alternative? Obviously its a part of all our jobs to ensure that our respective institutions get good value for money out of their IT spend, so I'm not suggesting money should ever be spent rashly, but equally, the leadership in schools needs to realise that if they want/need good quality IT tools then these have a corresponding cost attached to them.

  2. Thanks to Roberto from:

    Watty08 (20th January 2014)

  3. #62


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,033 Times in 813 Posts
    Rep Power
    341
    @jamiet1985 @Jobos

    The lightspeed cost is approx £3 per user per year on a 3yr deal plus the cost of the appliance plus what ever your re-seller adds.

  4. #63

    Join Date
    Mar 2007
    Location
    Devon
    Posts
    1,048
    Thank Post
    226
    Thanked 63 Times in 56 Posts
    Rep Power
    30
    We've been using Smoothwall for years but will be carrying out testing of others next term before our renewal so this threat is very interesting. Would like to move to an appliance over buying in our own server to run our filtering, if money allows that is. Smoothwall, Censornet, Lightspeed, Sophos and iboss all on testing list at present.

  5. #64

    Join Date
    Sep 2012
    Location
    UK
    Posts
    26
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    5
    We use BLOXX. It's fairly expensive at around £3K per year, but for ease of use and featureset I can't complain, and it has completely killed ALL anonymous proxy use. The pupils hate it!

  6. #65
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    Lightspeed all the way for me. 4k'ish + vat for 3 years was a no brainer!

  7. #66

    Join Date
    May 2009
    Location
    West Yorkshire
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Some useful info here. Will be starting to look at these solutions in the New Year, particularly SW and LS. Looking for an all in one solution to replace our current squid based system and the threat of ipads looming! They are on my BETT hit list for Jan.

  8. #67

    Join Date
    Jan 2010
    Location
    Slough
    Posts
    112
    Thank Post
    21
    Thanked 5 Times in 5 Posts
    Rep Power
    20
    We have been supporting Sophos web appliances in 48 schools in one local borough for over 3 years now and find them to be fantastic. I would always recommend them for anyone!

    You have to license them and then purchase hardware appliances but, if you have a VM infrastructure in place, you just need the license and they will send you a VM image you can run!

    The integrate perfectly in AD and work like a charm!

  9. #68


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,033 Times in 813 Posts
    Rep Power
    341
    This is the evaluation of Lightspeed vs Smoothwall that I sent to the senior leadership team:


    We are currently using a mixture of a commercial product called Smoothwall and an open source product called Dansguardian. The shortcomings that we have experienced with these systems are: speed, ease of use (for staff/students) and support.

    We looked at similar systems including Bloxx and Lightspeed. Bloxx is rather expensive and quite limited. We were impressed by Lightspeed as it fulfilled the shortcomings that we experience with smoothwall. We entered into a 4 week trial of lightspeed in mid November. During this trial we also spoke with other schools using lighspeed.

    Although we were impressed with many aspects of Lightspeed we found a design flaw: The system relies heavily on software that is installed on each laptop/telephone/PC/mac/tablet. The problem that this presents is that the company must keep the product updated for every version of laptop/telephone/PC/mac/tablet that we use. From experience of using the product we do not believe they are able to keep their product updated for multiple devices. We found significant issues with the software when using Citrix and the laptops in the Library (linux). We heard of further issues with ipads and we would expect more issues when manufacturers of tablets etc update their products.

    Following this experience we took another look at Smoothwall: The physical machines that we use for Smoothwall are due to be replaced and they do not cope well with the potential 1100 devices that we have in school. We are hopeful/confident that replacing these servers and using the latest version of Smoothwall will alleviate these problems. We had previously budgeted to do this. We have also investigated simplifying the process of staff/students using Smoothwall. We are now confident that we can use a system called Web Cache Configuration Protocol (WCCP). WCCP means that staff/students will not need to enter any proxy settings into their devices because the content filtering will be transparent.

    Although we are still concerned about the level of support we receive from smoothwall we have decided to continue using the system as we are confident that we can support it in-house. We have purchased a dedicated machine for this purpose and we intend on signing a three year contract in June 2014.

  10. #69

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 287 Times in 219 Posts
    Blog Entries
    1
    Rep Power
    176
    Quote Originally Posted by CyberNerd View Post
    This is the evaluation of Lightspeed vs Smoothwall that I sent to the senior leadership team:

    Although we were impressed with many aspects of Lightspeed we found a design flaw: The system relies heavily on software that is installed on each laptop/telephone/PC/mac/tablet. The problem that this presents is that the company must keep the product updated for every version of laptop/telephone/PC/mac/tablet that we use. From experience of using the product we do not believe they are able to keep their product updated for multiple devices. We found significant issues with the software when using Citrix and the laptops in the Library (linux). We heard of further issues with ipads and we would expect more issues when manufacturers of tablets etc update their products.
    This is another reason the iBoss 3550 has been a winner for us. It supports the following authentication methods:

    • Active Directory, LDAP, eDirectory, Open Directory, and OpenLDAP
    • Transparent Single Sign-on for Active Directory using server-side plugin, proxy, or NTLM
    • Mac OSX logon/logoff scripts (controlled server side)
    • Real-Time Directory Server Sync
    • Individual User Login Creation (SuperUser)
    - Web portal capture page for BYOD devices
    - Mobile agent can also be installed on laptops if desired

    We are using the AD plugin installed on our AD servers and Mac logon/logoff scripts - both work very reliably. The iBoss works seamlessly for Mac, Windows, or Linux. We are also able to set default filtering for our WiFi VLANs for iPad filtering and you can use the capture portal page with mobile devices as well. Additionally, iBoss has the MobilEther solution for MDM and filtering that will follow the device wherever it goes.

    I make not a single dime from telling you this because there is not a single distributor for the iBoss in all of Australia - I have never seen any web filter even approach the functionality of the iBoss, and they are fantastic value at twice the price for what they are capable of doing. I don't care what you are using, the iBoss is worth a look.

  11. #70

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,122 Times in 1,025 Posts
    Rep Power
    377
    Quote Originally Posted by seawolf View Post
    I recommend Phantom iBoss 100% over every other web filter I've used, including SW, iPrism, and Watchguard. In the past three years I've had a couple of vendors come trying to sell me their solution. Then, I show them what the iBoss can do and they soon realize they are the Goliath that has met their David with no hope of matching the iBoss even for 10 times the price. Yes, the SmoothWall is usually cheaper than the iBoss, but I see tons of techs on here stuffing around with their SW trying to figure out how to get it to do things the iBoss does out of the box with its eyes closed.

    Can't comment on the LightSpeed unit one way or the other as I haven't touched it, but you should trial both the LightSpeed and iBoss before deciding. I would be really surprised if the LightSpeed beat it. If it does, let me know and I'll look at it myself if it's THAT good.
    Maybe you could do a video to show us what the gui is like, features you can easily setup out the box etc

  12. #71

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 287 Times in 219 Posts
    Blog Entries
    1
    Rep Power
    176
    Quote Originally Posted by mac_shinobi View Post
    Maybe you could do a video to show us what the gui is like, features you can easily setup out the box etc
    Good idea. I might do that this summer after I get through my big list of projects. We're three days from the end of the school year here so it's pretty busy now and for the next couple of weeks until Christmas.

  13. Thanks to seawolf from:

    mac_shinobi (8th December 2013)

  14. #72

    Join Date
    Jun 2013
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    New here. I use iBoss also. I agree with seawolf. I have been using it for about 2 years. Youtube has a few videos that show basic setup but there is so much more it can do. it is a very powerful unit. that is my opinion only. I also do not get paid for this.

  15. #73
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    19
    Quote Originally Posted by CyberNerd View Post
    This is the evaluation of Lightspeed vs Smoothwall that I sent to the senior leadership team:


    We are currently using a mixture of a commercial product called Smoothwall and an open source product called Dansguardian. The shortcomings that we have experienced with these systems are: speed, ease of use (for staff/students) and support.

    We looked at similar systems including Bloxx and Lightspeed. Bloxx is rather expensive and quite limited. We were impressed by Lightspeed as it fulfilled the shortcomings that we experience with smoothwall. We entered into a 4 week trial of lightspeed in mid November. During this trial we also spoke with other schools using lighspeed.

    Although we were impressed with many aspects of Lightspeed we found a design flaw: The system relies heavily on software that is installed on each laptop/telephone/PC/mac/tablet. The problem that this presents is that the company must keep the product updated for every version of laptop/telephone/PC/mac/tablet that we use. From experience of using the product we do not believe they are able to keep their product updated for multiple devices. We found significant issues with the software when using Citrix and the laptops in the Library (linux). We heard of further issues with ipads and we would expect more issues when manufacturers of tablets etc update their products.

    Following this experience we took another look at Smoothwall: The physical machines that we use for Smoothwall are due to be replaced and they do not cope well with the potential 1100 devices that we have in school. We are hopeful/confident that replacing these servers and using the latest version of Smoothwall will alleviate these problems. We had previously budgeted to do this. We have also investigated simplifying the process of staff/students using Smoothwall. We are now confident that we can use a system called Web Cache Configuration Protocol (WCCP). WCCP means that staff/students will not need to enter any proxy settings into their devices because the content filtering will be transparent.

    Although we are still concerned about the level of support we receive from smoothwall we have decided to continue using the system as we are confident that we can support it in-house. We have purchased a dedicated machine for this purpose and we intend on signing a three year contract in June 2014.
    Authentication with the Lightspeed Rocket has been discussed in other threads...but incase anyone reads this I thought it best to clear up a couple of things.

    The Agent in question above is not mandatory but optional, there are OSX, Windows, and Linux versions, and is generally recommended for managed wired devices and gives a very detailed view of client authentication events plus other useful information. A centralised DC agent can also be used, authentication on block messages, 802.1x for integration with wireless systems authentication such as Radius, and various captive portal options for BYOD or guest devices (unmanaged).

    Also, incase it helps:
    WCCP has been around a long time. Check out its abilities to filter HTTPS traffic before jumping.

    If thinking of authenticating every session with a challenge like NTLM and you should check scalability...web 2 .0 creates lots of sessions.

    Authentication is always a great topic of discussion but not that's straightforward when dealing with mixed environments and operating systems.

    Look forward to more discussion

    Simon

  16. 2 Thanks to Eappariello:

    bodminman (8th December 2013), zag (9th December 2013)

  17. #74


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,033 Times in 813 Posts
    Rep Power
    341
    Quote Originally Posted by Eappariello View Post
    Authentication with the Lightspeed Rocket has been discussed in other threads...but incase anyone reads this I thought it best to clear up a couple of things.

    The Agent in question above is not mandatory but optional, there are OSX, Windows, and Linux versions, and is generally recommended for managed wired devices and gives a very detailed view of client authentication events plus other useful information.
    The specific problems with the clients are that they are broken. Light speed engineers told us in no uncertain terms that the Linux client doesn't work and that the thin client option is broken for certain browsers. They don't seem to have an option for chrome books and I certainly would not recommend this solution for a BYOD school unless you are being very specific about the type of machines students bring in. I would be very worried that a simple browser or iOS update would knock a number of machines offline.
    The non client transparent option is virtually unusable for example if you need to be able to log into an https site.
    Light speed is a superb system if you've got a bunch of regular windows or Mac workstation and it has some really awesome features. Don't hold your breath if you want it to work with all devices. Hence our move to WCCP.

  18. #75
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    19
    Quote Originally Posted by CyberNerd View Post
    The specific problems with the clients are that they are broken. Light speed engineers told us in no uncertain terms that the Linux client doesn't work and that the thin client option is broken for certain browsers. They don't seem to have an option for chrome books and I certainly would not recommend this solution for a BYOD school unless you are being very specific about the type of machines students bring in. I would be very worried that a simple browser or iOS update would knock a number of machines offline.
    The non client transparent option is virtually unusable for example if you need to be able to log into an https site.
    Light speed is a superb system if you've got a bunch of regular windows or Mac workstation and it has some really awesome features. Don't hold your breath if you want it to work with all devices. Hence our move to WCCP.
    @CyberNerd I can only apologise that you have received that information, it's not correct. If you pm me your school I can look into why this happened.

    Browser updates have no bearing on our filtering ability, and the solution is browser agnostic. The last iOS7 update meant that safari checks in before loading with a cloud service, and this fix was available immediately upon release of iOS7
    Lightspeed also fully supports Chromebooks, and we have several Chromebooks only customer sites.

    Again, my apologies you received this incorrect information.

    Happy to answer any other questions anyone has around this here or via PM

    Simon



SHARE:
+ Post New Thread
Page 5 of 6 FirstFirst 123456 LastLast

Similar Threads

  1. anyway to know which user defined category is used in which webfilter policies
    By bicky in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 21st June 2013, 09:36 AM
  2. Which imaging software do you use?
    By intrigue in forum How do you do....it?
    Replies: 87
    Last Post: 8th July 2009, 10:53 AM
  3. Which projector would you recomend
    By StewartKnight in forum Hardware
    Replies: 15
    Last Post: 22nd October 2006, 03:02 PM
  4. Which Webserver Installation Kit?
    By in forum Web Development
    Replies: 16
    Last Post: 15th November 2005, 11:36 PM
  5. Which CMS for School Website?
    By Ric_ in forum How do you do....it?
    Replies: 19
    Last Post: 10th November 2005, 01:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •