Re: Securing the internet connections

["ॐ aditya mukadam ॐ" <aditya.mukadam () gmail com>]

Wali,

Im not really sure if I understood your question, all I could gather
is you need a web/proxy solution along with URL filtering.Also you
have AIP-SSM ASA.

My views:
1) Yes AIP-SSM should do the job however how are you gonna gauge the claim ?
2) Bluecoat is absolutely the best proven fit with great features .
But as you said its expensive. I would say, its worth it !
3) You can ponder over a solution including proxy server which is
intergrated with Websense with Network Agent .

Please consider below points:
1) With cost-effective approach of intergrating webserver and url
filter, there can be lot of complexities and compatiblity issue.I
would always prefer a stable, single vendor solution ( though
expensive) if accessing internet my company's #1 priority.
2) With any solution, you would need a well educated team to manage
this as it serves the critical function of 'Internet'. Proxy/Url
filtering can get tricky if not managed/maintained.

Thanks,
Aditya Govind Mukadam


On Fri, Sep 19, 2008 at 7:27 PM, WALI <hkhasgiwale () gmail com> wrote:
> With an advanced Inspection and Prevention Security Services Module
> (AIP-SSM) for the Cisco ASA 5500 Series Adaptive Security Appliance residing
> at my perimeter, I am in need of choosing a solution for granting safe and
> secure Internet access to my 2000+ userbase on the inside. A solution that
> would suffice as my proxy/web caching needs too and possibly allowing me to
> do URL filtering according to my policy.
>
> I was looking at secure computing's webwasher and Microsoft's ISA 2006 as
> possible solutions. Bluecoat is expensive. These guys tout of their L7
> capabilities to detect malwares and scan HTTPS traffic but I feel that my
> AIP SSM should be able to do that job.
>
> What do you guys advise!!?