Additional Web Filtering Options

  • 1
  • Idea
  • Updated 2 years ago
I would like to see some additional web filtering options in addition to Websense and Barracuda. Linux has some great open source URL filtering options and it would be nice to either:

a) Configure HM as a whole to access a custom URL filtering service

b) Configure individual branch routers to be able to use different custom URL filtering services, i.e. BranchA uses Websense, BranchB uses Barracuda, BranchC uses a custom in-house filter
Photo of Corey

Corey

  • 6 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Corey,
Are there any particular web filtering solutions you want to see us integrate? OpenDNS? Something else?
Photo of Corey

Corey

  • 6 Posts
  • 0 Reply Likes
Hi Mike,
I'm thinking about two different possibilities:

1. Using BIND for DNS filtering - but I've probably answered my own question here because we could build two K-12 safe DNS servers that blacklist certain URLs, and just direct the User Profiles to use those. And set the firewall to block any outbound port 53 traffic that does not go to those DNS servers.

2. The other scenario I'm thinking about is actual content/time filtering. Content in a sense of proxy'ing everything through a branch-local proxy server (squid, etc.). Perhaps having a Cisco-like WCCP function where web traffic can be diverted to a proxy. And when I say time filtering - either blocking out web access during specific times, or limiting the amount of time a user can spend on the Internet at a certain "branch" within a given period.

Most of my clients are non-profits or small businesses that can't afford enterprise solutions, but they need features to protect children, or like some of my restaurant clients, limit access to time periods so customers on the Guest network aren't tying up a table during a dinner rush for 3 hours on a laptop.
Photo of David Jackson

David Jackson

  • 1 Post
  • 0 Reply Likes
I for one would love to see squid implemented into the BR100's. Being locked into either Websense, OpenDNS, and Barracuda is the only thing preventing me from using the BR100 as our main branch router.
Photo of Daniel

Daniel

  • 14 Posts
  • 4 Reply Likes
Hi David,
Would you mind elaborating on how you would use squid? Or what are the benefits it adds?

I'm really interested about what features/functionality you require beyond those provided by the services you mentioned.

Thanks,
Daniel.
Photo of Corey

Corey

  • 6 Posts
  • 0 Reply Likes
I think a big advantage to squid would be the time options. I have clients that don't want the Internet available during certain hours or limit the amount of time a user has while connected. Squid can do this with ACLs and has a time quota function built in to limit usage x minutes per day, etc.
Photo of FG

FG

  • 1 Post
  • 0 Reply Likes
Do you plan to include support for other cloud proxy services like Zscalar, Blue Coat, etc.? Can this be manually configured in the Branch Router?