Windows Thread, ISA 2006 blocking access to IP addresses in Technical; We run ISA 2006 as an additional layer of filtering to pick up sites our RBC fails to filter (amongst ...
13th January 2009, 01:54 PM #1
ISA 2006 blocking access to IP addresses
We run ISA 2006 as an additional layer of filtering to pick up sites our RBC fails to filter (amongst other things). As part of this we regularly monitor the logs to detect common "off task" site accesses - i.e. students accessing proxy websites.
We've come across a real vein of proxy websites this morning - loads more than I want to sit and add into the "ban" filter because I've got more pressing things to deal with - but I've noticed they all resolve down to a couple of IP addresses.
Is there a way of quickly blocking access to a URL based on the IP address it resolves back to in ISA 2006....? This will enable me to enter in the target IPs quite quickly without having to sit and trawl through a list of websites...
Thanks in advance!
13th January 2009, 02:13 PM #2
Just use a seporate ban rule above the internet access rule that bans any traffic from the internal networks set to the individual host IPs that you want to ban. You can set these up as destinations and add hosts by ip or subnets that you want to block.
14th January 2009, 01:37 PM #3
I was wondering about doing that, but wasn't sure it would work when users were going to URL's rather than trying to hit the IP address directly.
Will give it a go - thanks!
14th January 2009, 04:29 PM #4
Just as an update, that seemed to do the job nicely.
All I need now is something to inspect incoming HTML and deny access if the page contains a couple of key terms: such as unblock, proxy and bebo.
My students hate me - can't think why....
16th January 2009, 01:57 PM #5
Know the feeling dont worry, But as i see it paid to keep it safe not to make friends. I think i managed to upset all the students when i set isa to block all Flash content, .exe's, streaming content, etc etc but the kids do allot more work now they aren't playing games all day.
Originally Posted by TheCrust
16th January 2009, 02:49 PM #6
You've blocked flash?! Nearly 90% of our official computer usage is flash based educational sites - educationcity, mathletics, mymaths etc...
Originally Posted by Azhibberd
16th January 2009, 02:57 PM #7
Well we are blocking flash content but we have an exception list (Allowing things like mymaths) but unless its educational we wont allow the flash, for the first week of it we just had loads of kids constantly waiting for the game sites to load.... but after a week they realised it wasn't going to (well the site loads just the actually flash game wont)
Last Post: 6th January 2009, 11:10 PM
By Paid_Peanuts in forum Windows
Last Post: 7th December 2007, 07:46 PM
By skunk in forum Windows
Last Post: 18th October 2007, 12:36 PM
By UBBERgoose in forum Windows
Last Post: 23rd August 2007, 10:26 AM
By timbo343 in forum Windows
Last Post: 13th July 2007, 03:10 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Tags for this Thread