TMG Replacment

[ellsandell]

We are currently looking at moving away from CLEO (BT Lancs) which would save us enough money that we could be able to replace our ageing TMG server which is used for onsite filtering (timed release etc and firewall. We also use the Lightspeed product that BT Lancs provide as an extra layer (as we aren't on the required ranges to use the full product).

 

Now we have looked at a few replacements:

• Smoothwall
  
• Watchguard
  
• Sopohs UTM
  
• Dell Sonicwall/Netsweeper
  

 

Any experiences or recommendations of products to look at? Needs to have decent filtering (including timed release + AD) and ideally be onsite as we also use the Firewall to bridge two networks (admin). While we like the Smoothwall product it seems fairly expensive (and support isn't great?).

 

 

Cheers

Elliot

[win]

Watchguard does the trick. It also has filtering for spam / viruses / and url categories.

[Roberto]

We've been using Sonicwall as a replacement for the firewall and filtering properties of TMG. We've been really pleased with it. We had rather a sophisticated multi-layer approach to filtering and network edge security and while I can't discuss the exact price we paid, I can say we've implemented a 2x Sonicwall NSA 5600 cluster for a substantial cost saving over our previous arrangement.

[Leylass2001]

Have you looked at EXA Networks? They use SurfProtect Filtering which is excellent and so easy to use in comparison to Lightspeed. For firewall purposes they use NetAsq and are introducing Fortigate as an add on to their Broadband. The big thing for me is that their help desk is amazing. You receive an immediate response whether logging calls via telephone or email.

Its well worth a look - pm me if you want more info

[ellsandell]

Watchguard does the trick. It also has filtering for spam / viruses / and url categories.

 

Cheers will take a look.

 

We've been using Sonicwall as a replacement for the firewall and filtering properties of TMG. We've been really pleased with it. We had rather a sophisticated multi-layer approach to filtering and network edge security and while I can't discuss the exact price we paid, I can say we've implemented a 2x Sonicwall NSA 5600 cluster for a substantial cost saving over our previous arrangement.

 

Do you pay for the Netsweeper addon aswell? How does it handle filtering day-to-day?

 

Have you looked at EXA Networks? They use SurfProtect Filtering which is excellent and so easy to use in comparison to Lightspeed. For firewall purposes they use NetAsq and are introducing Fortigate as an add on to their Broadband. The big thing for me is that their help desk is amazing. You receive an immediate response whether logging calls via telephone or email.

Its well worth a look - pm me if you want more info

 

Were less interested in a Lightspeed type centralized system as we want full control. As one of our biggest problems is having no control over certain categorizes (Such as URL Shortners etc) I have tried contacting Exa before using the contact form on the website but heard nothing...

 

 

An option for a TMG replacement is Kemp load balancers..added the reverse proxy stuff a good while back now. - can get some info if anyone is interested

 

And i second EXA networks...they are good at what they do.

 

Would be interested in hearing some more details?

[SchoolsBroadband]

Hi @ellsandell,

 

I'm presuming you're a secondary school?

 

If so we offer as standard a combined offering of virtualised Fortigate (for security, app control, QOS, VPN etc) and virtualised Lightspeed for content filtering and mobile device management to complement all of our high speed leased line connections.

 

We've installed this in hundreds of schools across the country and numerous to replace CLEO connections in Cumbria and Lancashire.

 

Suggest you might want to PM @IrritableTech and @Marshall_IT who normally have a few nice words to say about us

 

Thanks

 

Dave

 

We are currently looking at moving away from CLEO (BT Lancs) which would save us enough money that we could be able to replace our ageing TMG server which is used for onsite filtering (timed release etc and firewall. We also use the Lightspeed product that BT Lancs provide as an extra layer (as we aren't on the required ranges to use the full product).

 

Now we have looked at a few replacements:

• Smoothwall
  
• Watchguard
  
• Sopohs UTM
  
• Dell Sonicwall/Netsweeper
  

 

Any experiences or recommendations of products to look at? Needs to have decent filtering (including timed release + AD) and ideally be onsite as we also use the Firewall to bridge two networks (admin). While we like the Smoothwall product it seems fairly expensive (and support isn't great?).

 

 

Cheers

Elliot

[IrritableTech]

Were less interested in a Lightspeed type centralized system as we want full control. As one of our biggest problems is having no control over certain categorizes (Such as URL Shortners etc) I have tried contacting Exa before using the contact form on the website but heard nothing

 

I wouldn't rule out lightspeed. I'm not aware how CLEO have implemented the product, but it can be completely controlled by you either by having a rocket on site, or a correctly configured tiered system.

 

On another note, what issues do you have with URL shorteners? Surely it's the final URL you're filter needs to be interested in, rather than the method of getting there?

[ellsandell]

Hi @ellsandell,

 

I'm presuming you're a secondary school?

 

If so we offer as standard a combined offering of virtualised Fortigate (for security, app control, QOS, VPN etc) and virtualised Lightspeed for content filtering and mobile device management to complement all of our high speed leased line connections.

 

We've installed this in hundreds of schools across the country and numerous to replace CLEO connections in Cumbria and Lancashire.

 

Suggest you might want to PM @IrritableTech and @Marshall_IT who normally have a few nice words to say about us

 

Thanks

 

Dave

 

Hi Dave we have actually had a quote through from you guys.

 

Have sent you a PM.

 

 

I wouldn't rule out lightspeed. I'm not aware how CLEO have implemented the product, but it can be completely controlled by you either by having a rocket on site, or a correctly configured tiered system.

 

On another note, what issues do you have with URL shorteners? Surely it's the final URL you're filter needs to be interested in, rather than the method of getting there?

 

Well its now BT Lancs (formally OneConnect), as we are currently using non prescribed ranges we can't use the full AD integrated product. Currently under them having a rocket onsite costs (or did when I asked) and since its fairly expensive anyway were not really interested in spending anymore money with them. (that and the very poor support/service we generally get from them)

 

The URL shorter issue is that we have had many of the generally used URL shortner services blocked (whether it be by BT Lancs or Lightspeed) which has caused a few educational tools to stop working as they like to use said services. Plus using sites like twitter etc which use them very often.

When attempting to get a site unblocked, or category changed we have been met with a flat "No" and the only option we have is to try and use the review option on the Lightspeed site - which is about as useful as...

[SteveM555]

We use a Smoothwall UTM-3000 and couldn't be happier with it. Everything we need is provided, we use:

 

Filtering

Firewall

VPN

LDAP Authentication

Guardian

Previously Bridging Admin/Curric until we ditched two networks.

 

You can do a LOT with a Smoothwall, really like the content modification policies (e.g. forcing youtube safe-mode, comment removal, Google safe search etc.)

[ellsandell]

We use a Smoothwall UTM-3000 and couldn't be happier with it. Everything we need is provided, we use:

 

Filtering

Firewall

VPN

LDAP Authentication

Guardian

Previously Bridging Admin/Curric until we ditched two networks.

 

You can do a LOT with a Smoothwall, really like the content modification policies (e.g. forcing youtube safe-mode, comment removal, Google safe search etc.)

 

How have you found the other aspects, i.e. support?

 

Elliot

[SteveM555]

How have you found the other aspects, i.e. support?

 

Elliot

 

We haven't really needed support that much so I can't really comment overall - The two times we did need it, they got back to us within the hour and dialled in remotely to fix an authentication issue.

[IrritableTech]

Well its now BT Lancs (formally OneConnect), as we are currently using non prescribed ranges we can't use the full AD integrated product. Currently under them having a rocket onsite costs (or did when I asked) and since its fairly expensive anyway were not really interested in spending anymore money with them. (that and the very poor support/service we generally get from them)

 

The URL shorter issue is that we have had many of the generally used URL shortner services blocked (whether it be by BT Lancs or Lightspeed) which has caused a few educational tools to stop working as they like to use said services. Plus using sites like twitter etc which use them very often.

When attempting to get a site unblocked, or category changed we have been met with a flat "No" and the only option we have is to try and use the review option on the Lightspeed site - which is about as useful as...

 

Lightspeed have been pretty quick when I submit a mis-categorised URL to them - and generally follow my thoughts on which category it should be put in. However if BT Lancs are blocking the security.shortners category, and shorteners are being identified as shorteners, there's not a lot lightspeed can do. Having two products in the mix could only confuse matters further I guess.

 

As I said previously - the vast majority of shortening services aren't a risk - the site to which the URL points is where the filtering should get involved.

[exa_john]

PM sent ellsanddell