ISA Server Blacklist

[jdoldridge]

Afternoon All,

 

We are looking for a blacklist with the usual sites on to restrict access to for the kids for an ISA 2006 server. We are hoping to move away from LEA provided filtering in the very near future and we don't want to spend days watching what the kids are accessing to block it all.

 

hope somebody can help and thanks in advance.

 

Josh

[glennda]

Personally I don't think ISA server with blacklists will cut it. Also ISA 2006 is now EOL is it not?

[jdoldridge]

I think so but at the moment we have to play with what we have got. I have been looking into TMG but thats up to the NM at the end of the day :/

 

Any other suggestions which cn be quickly deployed either along side or instead of ISA?

[glennda]

I think so but at the moment we have to play with what we have got. I have been looking into TMG but thats up to the NM at the end of the day :/

 

Any other suggestions which cn be quickly deployed either along side or instead of ISA?

 

Not that would be Free and up to the complete job, You could use something to supplement the upstream filtering from the LEA but nothing local. You best option is something like Smoothwall.

[RTFM]

Not that would be Free and up to the complete job, You could use something to supplement the upstream filtering from the LEA but nothing local. You best option is something like Smoothwall.

 

Aye, inhouse filter / firewall (Smoothwall, Bloxx, Barracuda, Sonicwall, Lightspeed to name but a few) and then i'd be asking LEA for a clean feed until you step away from them and just run everything in house

 

T'is what we did and we've never looked back!

[jdoldridge]

We aren't moving away from the LEA, we are just getting an unfiltered connection now we had quotes for bloxx and it cost big money. At the moment we have an ISA for the sites that the LEA miss but we are just a bit worried that the kids will be able to get on an awful lot.

[RTFM]

We aren't moving away from the LEA, we are just getting an unfiltered connection now we had quotes for bloxx and it cost big money. At the moment we have an ISA for the sites that the LEA miss but we are just a bit worried that the kids will be able to get on an awful lot.

 

Quotes we have had from Bloxx recently arent anymore expensive than their competitors (Smoothwall being the main one). Suppose it depends what your after. You'll need a lot more than an ISA if your wanting to go unfiltered, really the only option is a proper filter.

[glennda]

Quotes we have had from Bloxx recently arent anymore expensive than their competitors (Smoothwall being the main one). Suppose it depends what your after. You'll need a lot more than an ISA if your wanting to go unfiltered, really the only option is a proper filter.

 

Yup ISA will not cut it at any grade. Never really used bloxx apart from the demo but Smoothwall does real time scanning and actually looks into the webpages for content rather then just relying on blocklists which nowadays will not cut the mustard in education.

[RTFM]

Yup ISA will not cut it at any grade. Never really used bloxx apart from the demo but Smoothwall does real time scanning and actually looks into the webpages for content rather then just relying on blocklists which nowadays will not cut the mustard in education.

 

Bloxx does real time scanning too the demo was quite impressive infact.

[Tsonga]

We aren't moving away from the LEA, we are just getting an unfiltered connection now we had quotes for bloxx and it cost big money. At the moment we have an ISA for the sites that the LEA miss but we are just a bit worried that the kids will be able to get on an awful lot.

 

We did the same and put in a smoothwall box that filters the LEA provided pipe.

 

In our situation, the LEA pipe wasnt exactly unfiltered which made troubleshooting a challenge at times, but it was a stage in a plan to move the BT anyway.

[ZeroHour]

To answer your question

create a deny rule that applies against specific sites and ensure its above the web traffic allow rule.

I have set up similar rules myself to block specific stuff at ISA level.

I dont have the ISA console to hand to take screenshots but it can be done.