Firewall? No problem. Anything can do this. Web filter? It depends: what do you want? Do you want users to have to authenticate somehow? Do you need tiers of web-blocking? (Aka, User group A can reach xyz.com, but user group B are blocked.) What kind of reporting do you need? Do you need to know exactly what User X was doing from computer z, at what time and if it was blocked? Or something more basic?
Cheapest way to do this is to use available hardware (either a HW firewall or a spare server and a linux firewall OS like ClearOS. Endian, pfSense, Untangle, etc...) and free content filtering solutions (Squid/DansGuardian is on some of the fore-mentioned OSs, or you could use a free service like OpenDNS). Of course, the price goes up (in some cases, way up) from there. It all depends on you needs. Big name vendors are out there for content filtering... I'm currently looking into a few: Lightspeed Systems, Barracuda, iPrism, Kerio and iBoss to name a few. These might be much more than what you need (Although Kerio Control might fit your needs well). --Matt Ross Ephrata School District ----- Original Message ----- From: jesse-r...@wi.rr.com [mailto:jesse-r...@wi.rr.com] To: NT System Admin Issues [mailto:ntsysadmin@lyris.sunbelt-software.com] Sent: Mon, 30 Apr 2012 08:53:33 -0700 Subject: solution for firewall/webfilter UTM? > > Looking or input here. Have a customer with 200-250 devices (95% are Mac, > 5% PC based) and a 40Mb internet pipe. They need a firewall replacement > and a decent web-filter. I'm considering UTM options such as the > Watchguard XTM 510. I looked at SonicWall, but they recommended a NSA3500 > model which was much more expensive than the Watchguard. Untangle is > another nice UTM, but doesn't handle Mac stuff easily. > > It would be good if the web filtering can be tied in to their Open > Directory (Mac) infrastructure so web filtering can be done based on those > users/groups. > > Anyone else have cost-effective solutions for a firewall/web-filtering > appliance? They do NOT need all that extra crap like Antivirus on the > Gateway, Anti-spam, Email archiving, etc. They have zero need for those > add-ons that vendors are offering. > > Thanks > J > > -------------------------------------------------------------------- > mail2web.com – What can On Demand Business Solutions do for you? > http://link.mail2web.com/Business/SharePoint > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin