Re: Web filtering

["Barros, Jacob" <jkbarros () GRACE EDU>]

50Mb uplink.  During peak times, we average around 30Mb inbound and
maybe 2Mb outbound.  
 
Just to be clear, the trouble with the Barracuda was not throughput but
in connections.  The 610 was limited to 1500.  The 910 expands to 5,500
but when tech support was trouble shooting our failures, they said we
were already approaching or above 5,500 during peak times.  My initial
concern was that there was invalid or malicious traffic slipping by us,
but they confirmed that connections were mostly http.   
 
Jacob Barros
Network Administrator
Grace College
 
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Lopez, Diego
Sent: Tuesday, May 26, 2009 10:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Web filtering
 
In order to keep things in perspective, what is your approximate
Internet traffic ?
 
Diego Lopez
Network Analyst
Miami Dade College
 
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barros, Jacob
Sent: Tuesday, May 26, 2009 10:27 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Web filtering
 
We use iPrism by St Bernard.  We were happy with Barracuda until the box
began to have major failures, i.e. stopped all traffic.  Only a hard
reset would restore service.  We eventually had to leave them because
none of their appliances couldn't handle our 'normal' web traffic.  In
my opinion, their solution just doesn't fit higher ed anymore.  
 
iPrism has been a beautiful substitute.  Some of their categories aren't
quite what we hope for, but it's a breeze to customize.  In the 7 months
we have been using it there have only been one or two times that I can
remember a website being mis-categorized from a dynamic update.
 
In a related note, we believe both boxes are equally capable of curbing
many malware infections.  When we were in between solutions, there was a
window of about six days were there was no appliance in place.  After
about three days we got flooded with machines being infected with all
sorts of goodies.  It all ended shortly after we installed the iPrism
for testing.
 
FWIW
 
Jacob Barros
Network Administrator
Grace College
 
 
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Charles Seitz
Sent: Tuesday, May 19, 2009 3:59 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Web filtering
 
We have been using a Barracuda web content filter for a while. I can't
say it's been 100% smooth. It died the other day and we had to replace
it, and sometimes it just does odd things that slow down web surfing to
a crawl. We only use it on the fac/staff network. 
________________________________

Charles A. Seitz
Senior Security Analyst
University of Tennessee Information Security Office
Martin Campus
cseitz () tennessee edu
(731) 881-7966



On 5/19/09 2:22 PM, "Reyes, Esteban" <reyes () LAKEFOREST EDU> wrote:
Has anyone been able to implement web filtering with dynamic updates? If
so, what are you using to achieve that?

Thanks,

Esteban Reyes | Lake Forest College