+ Post New Thread
Results 1 to 13 of 13
Internet Related/Filtering/Firewall Thread, Is ISA Server enough? in Technical; I'm moving to a new school in September, where there isn't really effective internet filtering. The company who have the ...
  1. #1
    jstuttard's Avatar
    Join Date
    Nov 2009
    Location
    Northamptonshire
    Posts
    146
    Thank Post
    8
    Thanked 29 Times in 23 Posts
    Rep Power
    14

    Is ISA Server enough?

    I'm moving to a new school in September, where there isn't really effective internet filtering.

    The company who have the service contract said in a meeting that they'd like to install an ISA Server to up the game a little and bring the filtering more in line with what there should be in place.

    Personally I'm a huge fan of Censornet with it's active image filtering, google safe search, nightly updating and it's wonderful user / workstation / scheduling control and reporting.

    Can ISA Server do all that I'm used to Censornet doing? Or does it need to work in partnership with something else?

    Would an ISA Server be enough?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,757
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    ISA server has no filtering by category built in at all. Unless you use thrid party software with it, for example websense. You can however restrict to a defined list of sites or block a defined list of sites.

    Threat Management Gateway, the replacement for ISA has filtering. But you have to pay extra for it. It is not bundled with the product. Myself i have never used TMG filtering.
    Last edited by FN-GM; 4th June 2010 at 12:08 AM. Reason: more detail added

  3. #3
    IanT's Avatar
    Join Date
    Aug 2008
    Location
    @ the back of my server racks farting.....
    Posts
    1,891
    Thank Post
    2
    Thanked 118 Times in 109 Posts
    Rep Power
    59
    Why on earth would anyone want to touch TMG.........just as bad as its previous version (ISA). Tell them to get a proper solution in.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,757
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    Quote Originally Posted by IanT View Post
    Why on earth would anyone want to touch TMG.........just as bad as its previous version (ISA).
    Extra features like the content filtering. It also has advanced anti-virus, anti-malware, and intrusion detection features. Another feature is the ability to inspect https traffic.

    Some people are forced to use ISA becuase of the content filtering software for example Websense.

    ISA & TMG is the way to go when protecting Sharpoint & OWA sites from external users. There is no other product that can publish sharepoint and owa sites like this.

    ISA and TMG have a far better integration than allot of other similar products.

    It is also very cheap when buying for education. Allot cheaper than other solutions.

    Tell them to get a proper solution in.
    Like what?
    Last edited by FN-GM; 4th June 2010 at 12:04 AM.

  5. #5
    ful56_uk's Avatar
    Join Date
    Mar 2008
    Location
    Essex
    Posts
    554
    Thank Post
    105
    Thanked 23 Times in 21 Posts
    Rep Power
    17
    We use tmg for basic filtering for our guest wireless, does the job. Simple to setup and we make use of the scanning on downloads as well

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,757
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    Quote Originally Posted by ful56_uk View Post
    We use tmg for basic filtering for our guest wireless, does the job. Simple to setup and we make use of the scanning on downloads as well
    Do you have a black list / white list?

  7. #7
    IanT's Avatar
    Join Date
    Aug 2008
    Location
    @ the back of my server racks farting.....
    Posts
    1,891
    Thank Post
    2
    Thanked 118 Times in 109 Posts
    Rep Power
    59
    I'm sure this would do all the jobs: SmoothWall | Web Content Filtering and Network Security

  8. Thanks to IanT from:

    tom_newton (4th June 2010)

  9. #8
    ful56_uk's Avatar
    Join Date
    Mar 2008
    Location
    Essex
    Posts
    554
    Thank Post
    105
    Thanked 23 Times in 21 Posts
    Rep Power
    17
    Quote Originally Posted by FN-GM View Post
    Do you have a black list / white list?
    We just use the built in categorys, on the web access rule it just says these categorys are banned, updates come from the update bit of tmg. We justed added it to our school agreement. The web access rule has a captivate portal attached to it so students have to login first before they get the Internet. Here is the list

    http://www.gilham.org/Blog/Lists/Posts/Post.aspx?ID=740
    Last edited by ful56_uk; 4th June 2010 at 08:36 AM.

  10. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,757
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    Sorry i misread you post, i thought you was talking about ISA

  11. #10

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,986
    Thank Post
    850
    Thanked 2,652 Times in 2,252 Posts
    Blog Entries
    9
    Rep Power
    764
    ISA would not be sufficient as it has no active filtering component, TMG is the current solution and does provide filtering abilities, have not used it personally yet but am moving to it shortly.

    Quote Originally Posted by FN-GM View Post
    Extra features like the content filtering. It also has advanced anti-virus, anti-malware, and intrusion detection features. Another feature is the ability to inspect https traffic.

    Some people are forced to use ISA becuase of the content filtering software for example Websense.
    Was looking at their downloads page the other day and they now have a ISAPI filter for TMG so it should now work with TMG also.

    Quote Originally Posted by FN-GM View Post
    ISA & TMG is the way to go when protecting Sharpoint & OWA sites from external users. There is no other product that can publish sharepoint and owa sites like this.

    ISA and TMG have a far better integration than allot of other similar products.

    It is also very cheap when buying for education. Allot cheaper than other solutions.
    The other reason to consider TMG is its support of IP6 and 64bit allowing for the use of technologies like Windows 7 DirectAccess which would be much more difficult if not impossible with some of the other systems.

  12. #11


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,458
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195
    As many folk have pointed out - ISA on its own won't do a right lot.
    You should ensure if you are starting from scratch that you get a filter with some credible answers for proxies, HTTPS and online gaming.

    If you'd like to eval one of our filter units (either hardware, or software/VM like Censornet), let me know. I'm not going to "sell it to you" on here - a) that's naughty, b) i'm no salesman and c) i'm sure our happy customers will do that for me

  13. #12

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,784
    Thank Post
    272
    Thanked 1,129 Times in 1,025 Posts
    Rep Power
    348
    I use Squid and Dansguardian (which i think is what smoothwall is based on AFAIK) you can download free blacklists aswell but tbh i don't use them, i only use it for blocking sites that the lea refuse to! works really well and is easy to configure enless you are after blocking users via group membership which i havnt quite got round to yet!
    Last edited by robk; 4th June 2010 at 07:45 PM. Reason: Slight Typo

  14. #13

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,004
    Thank Post
    237
    Thanked 190 Times in 146 Posts
    Rep Power
    106
    If they really mean "ISA Server" and it isn't the case that they actually meant "ForeFront TMG" but just haven't got used to calling the new version by its new name then frankly they're fools who shouldn't be allowed to touch an Internet connection, let alone protect one.

    ISA server is very good at what it does (we use it in conjunction with websense, and we're very happy with it). It doesn't do content filtering in itself though, as others have said.
    ForeFront TMG however, ups the game considerably. Whether it's enough for an educational environment I can't really say yet, but we plan to migrate to that plus Websense, Real Soon Now.

SHARE:
+ Post New Thread

Similar Threads

  1. [Windows Software] Server 2008 r2 ISA Server
    By denon101 in forum Licensing Questions
    Replies: 5
    Last Post: 25th January 2010, 12:03 PM
  2. isa server
    By ICT_GUY in forum Wireless Networks
    Replies: 8
    Last Post: 20th May 2008, 02:29 PM
  3. ISA SERVER
    By smallsoldier in forum Windows
    Replies: 7
    Last Post: 16th February 2008, 02:54 PM
  4. ISA Server
    By yeoman in forum Windows
    Replies: 8
    Last Post: 5th February 2007, 09:32 AM
  5. ISA Server Email Server Publishing
    By Norphy in forum Windows
    Replies: 12
    Last Post: 26th May 2006, 01:14 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •