Re: Web/Internet Filtering with dynamic updates? 2010 update

["SCHALIP, MICHAEL" <mschalip () CNM EDU>]

Started with Bluecoat (expensive, major hassle and problematic configuration issues with out networks).....now we're on 
IronPort - works well, easier to manage.  "Policy" is still evolving.....we're relying on the vendor's default stance, 
but give folks the option of requesting access to anything that may have been inadvertently blocked, (provided they 
have the request endorsed by someone higher up in their foodchain.  This sorts out the folks who *really* need the 
access, from the ones who a merely curious or grazing....)  We'd be interested to see/hear what other folks are doing 
for policy, too....

M

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Walter 
Petruska
Sent: Wednesday, April 28, 2010 1:10 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Web/Internet Filtering with dynamic updates? 2010 update

Hello-

As we're getting hit with more and more web-borne phishing, etc. directing to known malware/botnet sites, we've decided 
to implement some form of web/internet content/address filtering.

There are a couple of paths available these days- which allow us to overcome the dependancy on one or multiple premise 
devices, such as SaaS or MSP solutions.

I'm wondering if any of you have CURRENT experience with the following vendors, or have a solid recommndation of 
what/who we should be examining.  FYI- our current Internet pipe is about 400 Mb, and is expected to grow in coming 
years up to 1 Gb ( but not too soon, I hope!)

Vendors:

Webroot (in the cloud solution) perhaps along with their e-mail archiving solution (we currently use Postini).
Barracuda

Also- if you are currently filtering, do you limit to particular networks, and/or do you have policy on WHAT you filter?

Thanks-

Walter Petruska, CISSP, CISA, CGEIT
Information Security Officer
University of San Francisco
wpetruska () usfca edu<mailto:wpetruska () usfca edu>



--
This message has been scanned for viruses and
dangerous content by MailScanner<http://www.mailscanner.info/>, and is
believed to be clean.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.