Internet Related/Filtering/Firewall Thread, Is ISA Server enough? in Technical; I'm moving to a new school in September, where there isn't really effective internet filtering.
The company who have the ...
3rd June 2010, 10:38 PM #1
Is ISA Server enough?
I'm moving to a new school in September, where there isn't really effective internet filtering.
The company who have the service contract said in a meeting that they'd like to install an ISA Server to up the game a little and bring the filtering more in line with what there should be in place.
Personally I'm a huge fan of Censornet with it's active image filtering, google safe search, nightly updating and it's wonderful user / workstation / scheduling control and reporting.
Can ISA Server do all that I'm used to Censornet doing? Or does it need to work in partnership with something else?
Would an ISA Server be enough?
3rd June 2010, 10:55 PM #2
ISA server has no filtering by category built in at all. Unless you use thrid party software with it, for example websense. You can however restrict to a defined list of sites or block a defined list of sites.
Threat Management Gateway, the replacement for ISA has filtering. But you have to pay extra for it. It is not bundled with the product. Myself i have never used TMG filtering.
Last edited by FN-GM; 4th June 2010 at 12:08 AM.
Reason: more detail added
3rd June 2010, 11:17 PM #3
Why on earth would anyone want to touch TMG.........just as bad as its previous version (ISA). Tell them to get a proper solution in.
3rd June 2010, 11:59 PM #4
Extra features like the content filtering. It also has advanced anti-virus, anti-malware, and intrusion detection features. Another feature is the ability to inspect https traffic.
Originally Posted by IanT
Some people are forced to use ISA becuase of the content filtering software for example Websense.
ISA & TMG is the way to go when protecting Sharpoint & OWA sites from external users. There is no other product that can publish sharepoint and owa sites like this.
ISA and TMG have a far better integration than allot of other similar products.
It is also very cheap when buying for education. Allot cheaper than other solutions.
Tell them to get a proper solution in.
Last edited by FN-GM; 4th June 2010 at 12:04 AM.
4th June 2010, 12:05 AM #5
We use tmg for basic filtering for our guest wireless, does the job. Simple to setup and we make use of the scanning on downloads as well
4th June 2010, 12:07 AM #6
Do you have a black list / white list?
Originally Posted by ful56_uk
4th June 2010, 08:15 AM #7
Thanks to IanT from:
tom_newton (4th June 2010)
4th June 2010, 08:33 AM #8
We just use the built in categorys, on the web access rule it just says these categorys are banned, updates come from the update bit of tmg. We justed added it to our school agreement. The web access rule has a captivate portal attached to it so students have to login first before they get the Internet. Here is the list
Originally Posted by FN-GM
Last edited by ful56_uk; 4th June 2010 at 08:36 AM.
4th June 2010, 08:50 AM #9
Sorry i misread you post, i thought you was talking about ISA
4th June 2010, 10:30 AM #10
ISA would not be sufficient as it has no active filtering component, TMG is the current solution and does provide filtering abilities, have not used it personally yet but am moving to it shortly.
Was looking at their downloads page the other day and they now have a ISAPI filter for TMG so it should now work with TMG also.
Originally Posted by FN-GM
The other reason to consider TMG is its support of IP6 and 64bit allowing for the use of technologies like Windows 7 DirectAccess which would be much more difficult if not impossible with some of the other systems.
Originally Posted by FN-GM
4th June 2010, 04:56 PM #11
As many folk have pointed out - ISA on its own won't do a right lot.
You should ensure if you are starting from scratch that you get a filter with some credible answers for proxies, HTTPS and online gaming.
If you'd like to eval one of our filter units (either hardware, or software/VM like Censornet), let me know. I'm not going to "sell it to you" on here - a) that's naughty, b) i'm no salesman and c) i'm sure our happy customers will do that for me
4th June 2010, 07:33 PM #12
I use Squid and Dansguardian (which i think is what smoothwall is based on AFAIK) you can download free blacklists aswell but tbh i don't use them, i only use it for blocking sites that the lea refuse to! works really well and is easy to configure enless you are after blocking users via group membership which i havnt quite got round to yet!
Last edited by robk; 4th June 2010 at 07:45 PM.
Reason: Slight Typo
4th June 2010, 07:41 PM #13
If they really mean "ISA Server" and it isn't the case that they actually meant "ForeFront TMG" but just haven't got used to calling the new version by its new name then frankly they're fools who shouldn't be allowed to touch an Internet connection, let alone protect one.
ISA server is very good at what it does (we use it in conjunction with websense, and we're very happy with it). It doesn't do content filtering in itself though, as others have said.
ForeFront TMG however, ups the game considerably. Whether it's enough for an educational environment I can't really say yet, but we plan to migrate to that plus Websense, Real Soon Now.
By denon101 in forum Licensing Questions
Last Post: 25th January 2010, 12:03 PM
By ICT_GUY in forum Wireless Networks
Last Post: 20th May 2008, 02:29 PM
By smallsoldier in forum Windows
Last Post: 16th February 2008, 02:54 PM
By yeoman in forum Windows
Last Post: 5th February 2007, 09:32 AM
By Norphy in forum Windows
Last Post: 26th May 2006, 01:14 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)