Manish

Andy, I haven't used Microsoft ISA, in a long-long time. But I hear it's a good product. So even if your requirements are not met directly by a feature or config setting, you should be able to realise goals by architectural engineering. Quite a few of my customers wanted this, and I managed to do it with SafeSquid. Though, let me warn you, this isn't done by mere configuration settings in SafeSquid too! But this is what we do - We set-up two instances of SafeSquid, say proxyA & proxyB. In proxyA we create a "Profile" say 'free-web-sites' for the web-sites, that may be accessed without authentication, by everybody. And then we create a rule in "Request Forwarding" for '!free-web-sites' ( i.e. all requests that are NOTprofiled as free-web-sites ) to be forwarded to proxyB. Next we simply create a rule in "Access Restrictions" in proxyB to deny all requests, but allow only those that are authenticated. Now the users will be challenged for authentication whenever they try to access any web-site except for 'free-web-sites' (proxyB will actually do the challenge) I gave the example via SafeSquid, because when customers demand, content filtering, that's more than mere url filtering, and I am more comfortable with it's design. But I am sure you should be able to do it with any other good proxy server too!

Hi Bobo, I really wouldn't do all that circus to simply control the Internet Access of the kids. IMHO, you want to simply ensure that the kids go to only specific kinds of web-sites & do not go to porn etc. Maybe you also want some virus-scanning thrown in, along with checking user-agent signatures. And maybe you want to define the time-slots when the little guys can access the web. And maybe you want to be a complete "big-brother" who reports to the kid's parents with some impressive graphic reports about their kids, web-habits. This is pretty standard content filtering requirement. I suggest you to check-up SafeSquid. It's a content filtering proxy. The only down-side's you have to set-up a linux box. I know that this looks like a completely Microsoft Alley, but then the Windows Edition of SafeSquid's really pathetic. But the linux version, well ... you gotta use it to know it.