Security Basics mailing list archives

Re: Securing the internet connections


From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Sat, 20 Sep 2008 00:25:39 +0400

Hi!

I've heard about everything, but worked with ISA only. For good
web-proxy solution you need consider:
 - failover
 - good reporting
 - good caching
 - antivirus on proxy installed
 - possible WCCP support
 -integrating with your user directory
 - easy management of access groups


ISA seems the cheapest and easily integrates into AD structure, but
you should work hard to implement other features. If you're going buy
Blucoat or webwasher you should take very good care about support.

2008/9/19 WALI <hkhasgiwale () gmail com>:
With an advanced Inspection and Prevention Security Services Module
(AIP-SSM) for the Cisco ASA 5500 Series Adaptive Security Appliance residing
at my perimeter, I am in need of choosing a solution for granting safe and
secure Internet access to my 2000+ userbase on the inside. A solution that
would suffice as my proxy/web caching needs too and possibly allowing me to
do URL filtering according to my policy.

I was looking at secure computing's webwasher and Microsoft's ISA 2006 as
possible solutions. Bluecoat is expensive. These guys tout of their L7
capabilities to detect malwares and scan HTTPS traffic but I feel that my
AIP SSM should be able to do that job.

What do you guys advise!!?




-- 
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko


Current thread: