+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 20 of 20
Internet Related/Filtering/Firewall Thread, EMBC Filtering Inadequacies in Technical; We are embc and use smoothwall just for banned students to force them on to a restricted list of sites. ...
  1. #16
    maark's Avatar
    Join Date
    Feb 2006
    Location
    leicester
    Posts
    470
    Thank Post
    90
    Thanked 73 Times in 65 Posts
    Rep Power
    38
    We are embc and use smoothwall just for banned students to force them on to a restricted list of sites.
    The only thing putting me off using smoothwall for whole school is supposed reduction in speed by forcing everyone through the smoothwall box rather than direct to embc's proxy servers.
    This is according to embc but as anyone experience of this? We have 1500 students so could be an issue.

  2. #17

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    572
    Thank Post
    38
    Thanked 114 Times in 104 Posts
    Rep Power
    46
    Quote Originally Posted by GrumbleDook View Post
    EMBC users ... please, please, please do me a favour. Without feedback to your LAs things cannot be improved. If you are having problems with your filtering please let people know ...
    Have done that - spoke to the guy in charge of IT Services for schools commenting about the lack of dynamic content filtering, and the response I got was a sort of "it does the job well enough" type response and that it's Becta accredited so it must be good enough filtering. It may be purely something to do with our LA and their relationship with EMBC, but I have no way of telling.

  3. #18
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by tom_newton View Post
    Thanks guys - we love you too

    We try extremely hard on the anonymiser/proxy front. Certainly with SSL MITM (we are one of a handful of vendors offering this, in truth) i'd expect 99-point-something effectiveness. We will improve though

    Next target: games. I believe the flash filter has made inroads., It is young yet though - so feedback required!


    Tom, we recently had an issue with users using TOR portable with Firefox to bypass filtering both Smoothwall and EMBC, I tried it and could get on anything. I've since used software restriction policy to ban all exes which has stopped this.
    Am I right in thinking that if a student can use a TOR program that initiates an SSL connection from the client that Smoothwall cannot filter as it can't analyse the packets.

    If this is the case is there a way to ban SSL connections that aren't opened by the Smoothwall?

    Thanks.

  4. #19


    Join Date
    Sep 2009
    Location
    Yorkshire
    Posts
    206
    Thank Post
    64
    Thanked 69 Times in 45 Posts
    Rep Power
    22
    @cookie_monster

    What's your current setup?

    Transparent proxying or nay? Are we using certificate checking and/or SSL MITM?
    Is this UTM firewalled, or other setup?

    Me and rob_f will find out what the problem is. These tunneling apps are an affront to my very being!

  5. #20
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by nile_c View Post
    @cookie_monster

    What's your current setup?

    Transparent proxying or nay? Are we using certificate checking and/or SSL MITM?
    Is this UTM firewalled, or other setup?

    Me and rob_f will find out what the problem is. These tunneling apps are an affront to my very being!

    The device is a Smoothwall UTM rack box. I didn't actually set it up it was don't by another member of staff and smoothie support. No rush but if you can tell me where to check those settings I'll let you know.

    I can tell you that it's not transparent traffic could potentially bypass the smoothwall if it knew the ISP proxy address, but students are blocked from making those changes and I can't see how the TOR app could find it out.

    Thanks.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Overriding internet filtering on embc platform
    By kaphc in forum East Midlands Broadband Consortium (EMBC)
    Replies: 11
    Last Post: 27th November 2009, 02:57 PM
  2. Embc user level filtering
    By peterv5 in forum Windows
    Replies: 163
    Last Post: 12th May 2008, 11:10 PM
  3. ISA Server 2006 & EMBC - web filtering
    By Modey in forum Wireless Networks
    Replies: 7
    Last Post: 23rd April 2008, 11:28 AM
  4. EMBC - filtering - not fit for purpose?
    By TheCrust in forum Wireless Networks
    Replies: 9
    Last Post: 30th January 2008, 08:58 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •