Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Right solution?
0 views
Skip to first unread message
Kyle M. Burns
Nov 28, 2007, 8:39:01 AM11/28/07
to
I'm looking for a solution to help control access to content at a local
private school. The school is on a very tight budget (of course) and is
running in an environment with around 50 PCs and a single W2K3 server that is
acting as domain control and routing traffic to the Internet. Trying to find
the balance between blocking unwanted content and encouraging learning, we
would like to have a list of "known" bad sites which will be blocked (as well
as blocking based on the RSAC rating for sites that use it) and then replace
or remove blocked words or phrases for allowed sites. A while back we
implemented this type of solution using a tool called Proxomitron, but it was
really designed as a "personal" proxy and didn't stand up well to a lot of
clients. Can installing ISA Server on the existing server (whose current and
projected resource utilization is extremely low) meet one or both of these
needs?
private school. The school is on a very tight budget (of course) and is
running in an environment with around 50 PCs and a single W2K3 server that is
acting as domain control and routing traffic to the Internet. Trying to find
the balance between blocking unwanted content and encouraging learning, we
would like to have a list of "known" bad sites which will be blocked (as well
as blocking based on the RSAC rating for sites that use it) and then replace
or remove blocked words or phrases for allowed sites. A while back we
implemented this type of solution using a tool called Proxomitron, but it was
really designed as a "personal" proxy and didn't stand up well to a lot of
clients. Can installing ISA Server on the existing server (whose current and
projected resource utilization is extremely low) meet one or both of these
needs?
Jim Harrison (ISA SE)
Nov 30, 2007, 12:31:30 PM11/30/07
to
You DC is also your firewall?
Is this at least an SBS deployment?
Is this at least an SBS deployment?
--
Jim Harrison (ISA SE)
This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html
"Kyle M. Burns" <KyleM...@discussions.microsoft.com> wrote in message
news:E55037FC-AA6D-4E67...@microsoft.com...
Kyle M. Burns
Nov 30, 2007, 6:33:00 PM11/30/07
to
The organization has a single server (it was like pulling teeth to get the
2K3 server license and CALs). The server is dual homed with an internal
interface serving the school network and the external interface connected to
a consumer grade hardware router/firewall which routes traffic to the
Internet. This is far from an ideal situation but it's what I have to work
with.
2K3 server license and CALs). The server is dual homed with an internal
interface serving the school network and the external interface connected to
a consumer grade hardware router/firewall which routes traffic to the
Internet. This is far from an ideal situation but it's what I have to work
with.
Jim Harrison (ISA SE)
Dec 3, 2007, 4:07:41 PM12/3/07
to
Sorry, but we don't support ISA on a DC outside of SBS.
The traffic profile is, in a word, nasty.
The traffic profile is, in a word, nasty.
--
Jim Harrison (ISA SE)
This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html
"Kyle M. Burns" <KyleM...@discussions.microsoft.com> wrote in message
news:8D0B158D-036D-41A8...@microsoft.com...
Kyle M. Burns
Dec 4, 2007, 8:50:08 AM12/4/07
to
Thanks for the response, Jim. Do you know of a way for me to implement
filtering "on the cheap"? Maybe there's some way for me to at least force
DNS not to resolve for a known "black list" of domains as a first pass. I
have yet to convince the administration that content filtering is important,
so I want to find ways to provide some level of protection without them
allocating funds.
filtering "on the cheap"? Maybe there's some way for me to at least force
DNS not to resolve for a known "black list" of domains as a first pass. I
have yet to convince the administration that content filtering is important,
so I want to find ways to provide some level of protection without them
allocating funds.
Jim Harrison (ISA SE)
Dec 4, 2007, 12:21:23 PM12/4/07
to
Actually, as long as your one-and-only DC is also your Internet gateway,
Internet access filtering is the least of your worries.
What is protecting this machine from external *and* internal attacks?
Internet access filtering is the least of your worries.
What is protecting this machine from external *and* internal attacks?
--
Jim Harrison (ISA SE)
This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html
"Kyle M. Burns" <KyleM...@discussions.microsoft.com> wrote in message
news:D1B1F16E-3B35-43E3...@microsoft.com...
0 new messages