+ Post New Thread
Results 1 to 7 of 7
Windows Thread, ISA 2006 blocking access to IP addresses in Technical; We run ISA 2006 as an additional layer of filtering to pick up sites our RBC fails to filter (amongst ...
  1. #1

    Join Date
    Dec 2007
    Location
    Derbyshire. Ish.
    Posts
    270
    Thank Post
    30
    Thanked 23 Times in 16 Posts
    Rep Power
    25

    ISA 2006 blocking access to IP addresses

    We run ISA 2006 as an additional layer of filtering to pick up sites our RBC fails to filter (amongst other things). As part of this we regularly monitor the logs to detect common "off task" site accesses - i.e. students accessing proxy websites.

    We've come across a real vein of proxy websites this morning - loads more than I want to sit and add into the "ban" filter because I've got more pressing things to deal with - but I've noticed they all resolve down to a couple of IP addresses.

    Is there a way of quickly blocking access to a URL based on the IP address it resolves back to in ISA 2006....? This will enable me to enter in the target IPs quite quickly without having to sit and trawl through a list of websites...

    Thanks in advance!



    Jim

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Just use a seporate ban rule above the internet access rule that bans any traffic from the internal networks set to the individual host IPs that you want to ban. You can set these up as destinations and add hosts by ip or subnets that you want to block.

  3. #3

    Join Date
    Dec 2007
    Location
    Derbyshire. Ish.
    Posts
    270
    Thank Post
    30
    Thanked 23 Times in 16 Posts
    Rep Power
    25
    I was wondering about doing that, but wasn't sure it would work when users were going to URL's rather than trying to hit the IP address directly.

    Will give it a go - thanks!

  4. #4

    Join Date
    Dec 2007
    Location
    Derbyshire. Ish.
    Posts
    270
    Thank Post
    30
    Thanked 23 Times in 16 Posts
    Rep Power
    25
    Just as an update, that seemed to do the job nicely.

    All I need now is something to inspect incoming HTML and deny access if the page contains a couple of key terms: such as unblock, proxy and bebo.

    My students hate me - can't think why....

  5. #5
    Azhibberd's Avatar
    Join Date
    May 2008
    Location
    Newbury,Berkshire
    Posts
    169
    Thank Post
    20
    Thanked 21 Times in 20 Posts
    Rep Power
    17
    Quote Originally Posted by TheCrust View Post
    My students hate me - can't think why....
    Know the feeling dont worry, But as i see it paid to keep it safe not to make friends. I think i managed to upset all the students when i set isa to block all Flash content, .exe's, streaming content, etc etc but the kids do allot more work now they aren't playing games all day.

  6. #6

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,523
    Thank Post
    527
    Thanked 2,645 Times in 2,047 Posts
    Blog Entries
    24
    Rep Power
    924
    Quote Originally Posted by Azhibberd View Post
    Know the feeling dont worry, But as i see it paid to keep it safe not to make friends. I think i managed to upset all the students when i set isa to block all Flash content, .exe's, streaming content, etc etc but the kids do allot more work now they aren't playing games all day.
    You've blocked flash?! Nearly 90% of our official computer usage is flash based educational sites - educationcity, mathletics, mymaths etc...

  7. #7
    Azhibberd's Avatar
    Join Date
    May 2008
    Location
    Newbury,Berkshire
    Posts
    169
    Thank Post
    20
    Thanked 21 Times in 20 Posts
    Rep Power
    17
    Well we are blocking flash content but we have an exception list (Allowing things like mymaths) but unless its educational we wont allow the flash, for the first week of it we just had loads of kids constantly waiting for the game sites to load.... but after a week they realised it wasn't going to (well the site loads just the actually flash game wont)



SHARE:
+ Post New Thread

Similar Threads

  1. Squid and ISA 2006
    By deanw83 in forum *nix
    Replies: 0
    Last Post: 6th January 2009, 11:10 PM
  2. ISA 2006 + blocking internet for AD group
    By Paid_Peanuts in forum Windows
    Replies: 8
    Last Post: 7th December 2007, 07:46 PM
  3. ISA 2006 Help
    By skunk in forum Windows
    Replies: 3
    Last Post: 18th October 2007, 12:36 PM
  4. ISA 2006
    By UBBERgoose in forum Windows
    Replies: 3
    Last Post: 23rd August 2007, 10:26 AM
  5. exempt web addresses from ISA Cache
    By timbo343 in forum Windows
    Replies: 5
    Last Post: 13th July 2007, 03:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •