Advice needed on content filter setup
We are currently considering installing a new internet content filter on our campus. Right now, we have a very basic setup with router (DD-WRT) content filtering and Opendns.org filtering. We also have five access points connected directly to the wired network (no VLAN capable switches yet).
This setup works ok, but we have found we really need more logging and a bit more control than these solutions offer.
I am wanting all of the domain computers to silently connect to the proxy server, and log the username so that we can track student usage. I do not want students/staff to have to enter a username and password each time to use the internet on the domain computers.
I do want students/staff to be prompted for a domain username/password when they try to use the internet on a wireless laptop.
My plan was this:
-Purchase new basic Dell server to run Smoothwall Express and Advanced Proxy.
-Install new server in place of current router and activate transparent filtering
-Configure Advanced Proxy for Windows Server authentication (I was not sure if you can have this and transparent filtering at the same time. If not, are there any ways to eliminate the need for users to change proxy settings?)
I appreciate any and all input. I have previously tried to set this up in Vmware and to setup Dansguardian and both did not work well at all.
We have a relatively low budget for this.