Web Filtering - replacement for trend?

Hello
I was planning on using the trend micro content filtering for a Cisco 887VAW, however I now understand that this product is no long available/end of life. Is there an alternative?  
I was just looking for something fairly simple to setup as its for the public to use in a restaurant/bar. Therefore, just a blanket block of most unsuitable categories would be fine and whitelists etc would not really be needed.
Thanks in advance

Picas,
Thank you very much, looks perfect.  My son will be very happy since this was the main thing blocking him getting an ipad...
Thanks again,
Rick

Similar Messages

  • Can Cisco connect be used for small business web filtering?

    I am searching for a web filtering solution for our small church.  The core requirement is to use a hardware-based solution to filter all internet traffic.  Our current wiring looks like this: [ISP router] --> [switch] --> [Open Mesh wireless access points].  Can I connect a Linksys EA2700/3500/4500/6500 between the [ISP router] and the [Switch], disable the Linksys wireless, and use Cisco Connect to filter all the internet traffic?
    More info: We will only have a handful of wired/wireless devices which we have control over.  We expect most of the rest of the traffic to be generally outside our control via personally owned devices connecting thru the public wifi.  Therefore any solution which requires installation of software on individual devices will not work.
    (If there are other threads on this topic I'd be more than happy to read them, I just couldn't find any.)
    Thanks!!

    Hey
    check this article:
    http://www.oracle.com/technology/pub/articles/cunningham-database-xe.html
    Regards

  • Global Web Filtering Options

    I am looking for a global web filtering solution for our business but am having trouble finding a solution that will work acceptably for us globally.
    The problem is that our campany has hundreds of very small offices (mostly only 2-3 users with the odd larger office) located in remote locations all around the world where WAN links are very expensive and slow.
    We use all small office type cisco routers in our remote offices of various types (such as 800 series) and are rolling out WAAS/WAVE solutions to optimise our slow WAN links as much as possible, and all sites have site-to-site VPNs from the routers to our UK-based data centres.
    Currently we use Websense configured on the local routers at a few of our offices with a regional server in places such as the UK for most of Europe, and Mobile for most of the US for example.
    We could expand this to all locations, including Australasia, Middle East, Far East and Africa etc. but due to the remote locations we would need many local servers in many countries as the infrastructure to have just one regional Websense server isn't good enough in these areas and web performance would be too slow to be useable due to the latency to the Websense server location. It simply isn't financially feasible to put in hundreds of servers at lots of 2-3 man offices in the middle of no-where so I've been looking at other options.
    I was hoping a hosted solution would be the answer, but I've looked at WebSense's hosted service and it doen't appear to cover all regions (just has server farms in US/Europe which is no good for Africa etc.) I've also looked at Symantec MessageLabs but this has the same problem as there is no coverage in the Middle East/Asia/Africa etc and it proxies all web traffic so performance at these sites would probably be appaling with the limited bandwidth on top of the latency to the closest MessageLabs servers.
    I've now seen that Cisco have a new IOS Content Filter which uses Trend database servers. This sounded promising as it appears to cache the URL checks on the router making the server location less of an issue. But I'd still like to know where in the world they cover (I've seen reference to only 4 data centres globally). My other concern with this solution is whether it integrates into AD, so we can apply policies based on the user accounts like we do currently with the WebSense solution. The last thing is the price of this solution as it appears to be licensed based on the number of routers rather than the number of users. As our users are so spread out with only 2-3 users per router on average this is likely to mean for us this solution will be ridiculously expensive, can anyone advise if this is the case?
    My question therefore is can anyone advise on a solution for this that will work with our Cisco infrastructure in all our offices without having to purchase lots of servers for remote locations? I've seen that other vendors such as the Astaro Security Gateway have web filtering built into their products without the need for external servers, but I'd prefer to stick with Cisco if at all possible.
    Many thanks for any advice/help anyone can give me in this area.
    Paul

    Hi Paul,
    IOS Content filtering is licensed on a per router basis, you are right. So, probably that would not scale for you.
    Cisco has other solutions with Web Filtering and Ironport engines. The challenge in your setup is that each remote site would need to "call" to a central web filtering location that will be making the decision on allowing or no. Or you would need a service that scales well on a per contintent basis. There are some new Cisco web filtering options that could scale with servers almost everywhere in the world. But I don't think you can get a consice answer from this forum about your potential choices here.
    You local Cisco team will be able to provide you with these options. You are welcome to give them my email if they need to talk to me internally.
    I hope it helps a little.
    PK

  • How to web filtering via two network cards?

    I have Installed Server 2008 and two network cards
    on my pc. One LAN card for clients access and one for internet router. I need to share internet connection to my client computers with
    web filtering. So how to do that? I need to block some sites to client access.

    Hi,
    According to your description, my understanding is that you want to use the WS 2008 to share Internet connection and provide web filtering function for internal clients.
    Internal clients –(NIC1) WS 2008(NIC2) – Internet router – Internet network
    Manually assign IP address, default gateway, DNS server, etc. on NIC2. Manually assign IP address, DNS server, etc. on NIC1.
    Install Network Policy and Access Services – Routing and Remote Access Services. Detailed steps reference:
    Install and Enable the Routing and Remote Access Service
    https://technet.microsoft.com/en-us/library/cc770798(v=ws.10).aspx
    Then open Routing and Remote Access and start configuration. Enable NAT on NIC2 to transfer IP address. Detailed steps reference:
    Enable and Configure NAT
    https://technet.microsoft.com/en-us/library/dd469812.aspx
    Windows Server itself does not support web-based filter, third-party tools with application-layer firewall might be needed to realize this function. Configure WS as a router, it supports IP packet filtering, which specifies which type of traffic is allowed
    into and out of the router. Reference：
    https://technet.microsoft.com/en-us/library/cc732746(v=ws.10).aspx
    Best Regards,
    Eve Wang
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How to use Web Filters methodology  with Internal ITS with NW2004s

    ITS 6.2 will no longer be supported going forward with the upcoming NW2004s. Only internal ITS will be supported with 2004s. However, since PAS APIs are not available with Internal ITS, Can any one give some clue on how we can use the Web Filters methodology for use with Internal ITS with 2004s.

    A long time ago, but yesterday i have had time to try again to setup the MacMini server properly. But no luck.
    sudo changeip -checkhostname
    gives me:
    Primary address          = 192.168.1.** (i don't know it's save enough to put this IP complete on the net)
    Current HostName      = server.beeldenstorm.be
    The DNS hostname is not available, please repair DNS and re-run this tool.
    dirserv:success           = "success"
    So their is something wrong. But how to repair the DNS?
    MacMini server is working properly on our local network, but outside not. I have done the port forwarding.
    Another problem is that i have read that for the server to work properly we have to use fix IP address.
    So, that's what i am doing. But in that way their is no internet connection at all.
    So, no updates and ... .
    Lookup and Ping test, outside our local network:
    http://beeldenstorm.be/doc/lookup-and-ping.pdf
    Why is this so irritating and are there soo many problems on forums?
    I know: because most of us are not network/server specialists.
    But Apple sells this server app like a app for everybody, easy to install?
    Thanks for help.

  • APEX Listener as a replacement for modplsql ?

    Will APEX Listener ever be, or is it able to be now, a replacement for modplsql driven applications that are not APEX. It seems that it already takes care of everything needed to be a full scale modplsql replacement... In all honesty looking to see if it is possible to reduce the future licensing load on some of my clients if they wanted to build more redundancy into their front-end web applications. They wouldn't be reducing what they pay, as they are still in for the Forms installs in app server, but they are inhibited on their redundancy growth outward since adding new licenses to cover these new servers would be cost prohibitive. This is mainly a third-party product (SGHE's Self-Service Banner) that is driven off of modplsql, so rewrite isn't an option.
    Thanks for your input,
    -Richard

    As of the last EA version, it depends on which modplsql features your application uses. The main modplsql features that are not yet supported are:
    Basic database authentication - The listener must be configured with a single username and password and cannot dynamically change the database connection at run time.
    Multiple DADS - Each listener is configured for one and only one database connection. However, there is a way to install multiple copies of the listener, and configure each for a different database connection.
    Dynamic parameter passing - There must be a one to one relationship between fields on an HTML form (or query string variables in the URL) and the non-defaulted parameters of the called procedure. Name and Value arrays, with the "!" before the procedure name in the URL are not supported.
    CGI environment variables in the DAD.
    Oracle MAY support some or all of these features in the production version, or in some future version. We can probably influence this by telling Oracle what we want - but no guarantees. Kris Rice tells me that the APEX Listener was written to be extendable, so once Oracle gives us some documentation of how to extend it, some enterprising programmer may add some of these features as an extension.

  • Is Apple about to introduce a replacement for iWeb?? and where can I download iWeb to replace the one I lost??

    Having spent a little time searching for a replacement download for iWeb (details of why below)  it seems that I cannot find it anywhere in Apple Land.  From my limited experience here (iphone,  macbook pro, airport extreme and airport express)  it looks like Apple gradually withdraws stuff prior to introducing something really exciting  to replace it.
    So
    Question:   Is there a new super replacement for iWeb about to be introduced?  
    I cannot believe that Apple would take away something as great as iWeb (having read reviews and used it myself as a complete web novice)  without giving us something better.
    I foolishly followed some genius advice and did a wipe/reload of Lion, prior to updating to Mountain Lion (my fault, I thought my lovely Macbook Pro was running a little slow - probably wasnt - just me being impatient.) Anyway, long story short,  I lost iphoto (got it back by re-purchasing but would like a refund - another string running with this),   iWeb - can't find it anywhere - asked questions here in Apple Land and am getting some conflicting answers.
    I am sat in London without my iweb for a some days and would really like to get on with a bit of web stuff. 
    Question:  is there anywhere in Apple Land where I can download iWeb
    Question:  can you confirm that the iweb programme will be on one of the disks that came with the machine?   (they are 100 miles away so I will have to wait, unless there is an easier way)
    Sorry,  rambling a bit.
    Hope you can help out there
    Thanks
    Steve

    The iWeb application was specifically created to be used with .Mac and then MobileMe and Apple withdrew support for iWeb several months ago, when it was announced that MobileMe would be no longer and would be replaced by iCloud.  MobileMe ceased at the end of June this year and has been replaced by iCloud, that does not offer web hosting, so no need for iWeb.
    Apple stopped selling iWeb in its stores several months ago and has withdrawn support for iWeb, so no, you won't find either iWeb or iDVD for sale in the Mac App Store because Apple no longer sells it.
    You cannot download iWeb, so if you want iWeb, you will have to purchase the iLife 11 boxed set from Amazon and this contains iWeb 09 which is the latest version of iWeb.  Apple does not sell this either.
    If your Mac was running Snow Leopard, then it would have come with installation CD's, so yes, you should be able to re-load the whole of the iLife series, which includes iWeb, iDVD and iPhoto back onto your Mac running Mountain Lion.  You did not need to make an additional purcahse of iPhoto from the Mac App Store - you could have re-loaded from these CD's.  The only place you will get a refund is by contacting the Mac App Store. Nobody here can help you with that.
    So if you want iWeb back, check to see if it is on you installation CD's - it should be if you have a Mac running Snow Leopard and put it back on your Mac from there.  If not, then your only option is to purchase the iLife 11 boxed set from Amazon and you can load iWeb from there.
    As Apple no longer supports iWeb and there is no MobileMe any longer, then there are unikely to be any further updates to the programme and nothing else will come along.  You can still use the app though if you have it and it works with Mountain Lion, however, there may come a time when it won't work with future iOS updates, so it would pay you to look at the alternatives out there which are many and varied.  Take a look at RapidWeaver, Sandvox, Freeway Pro/Express, Flux 4 etc.  You can download free trials of most and some are for sale in the Mac App Store.
    Also, please be advised that this is a user to user forum and everyone here who replies to you is a user, so you are not talking directly to Apple here.
    Give Apple feedback directly by going to http://www.apple.com/feedback.

  • New Web Filtering in iOS7

    Apple have introduced the Web Filtering option in iOS7, but there is little informaiton out there explaining how this works.  Apart from being able to turn it on, and add whitelist or blacklist sites - is there any more?  How does Apple determine what content is blocked?  Are there categories?  Can we see them?  Can we control them?
    Without a bit more information on this feature and how it operates it's hard to trust it.
    Does anyone have any more information on this feature?

    Email?...just click on my Accout....or directly to [email protected]
    Yes, we want to offer a service for customers that include a very secure server thats hosted on hosteurope.de included is a workspace for 5000min Video and a safe dedicated bandwidth up and down. Firstly there is no need to invest in new hardware or network infrastructure. The second is the security thing, we dont want the people to handle around with their open ports to the internet, because thats a huge risk for sensitive production enviromets because that might be an open door for hacker. You cannot ensure that there are always competent Admins onside.
    Also the access to the server is hardly to handle with a standard DSL-Connection. What is if 10 users want to watch the same clip? Do you have a upload of min 10mbit?
    And: Dontyou need a management of the users?? The Integrationsample has just none. I think thats recommendend for a review application. Appart from that you can just upload 10clips!?
    Another point is the fact we love in FCsvr, updated features and bugfixes do not need to install a new version locally. So we did a lot of thinking, an come to the conclusion that thats the best. So, in case of that services we cannot offer that for free. Je decided to charge a annual fee.
    The online sample of RevApp is just to try a bit around, till end of november we want to include much more features.
    I am curious about that what eZ will release and how they handle the local istallation and the usermanagement...
    We are also very interested in People who have a critical look on our solution an help us to improve. Ideas of future features are also very welcome.
    So no offence at all, hope more people give us a feedback like you.
    Greetings Jan

  • Web Filtering / URL Filtering

    Dear All,
    I am looking forward to buy the cisco ASA Firewall with the below mentioned part number.
    ASA5525-SSD120-K9 kindly please let me know whether it supports WEB Filtering / URL Filtering.
    or do i need to go for any other model or license.
    Awaiting your quick responses as it is very urgent.
    Responses are highly appreciated..

    That's the hardware
    You also need a software subscription for the URL/web stuff/IPS
    Near the bottom of this page:  http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/data_sheet_c78-701659.html
    there is a chart with the options and part numbers.

  • Web Filtering Cisco ASA 5510

    Hello !
    I m a netword administrator, and i have been looking how to setup web filtering in a network, we are using cisco asa 5510 as a firewall and i have been looking for a way to block url such as facebook and streaming web sites since users are allowed to access to any website and they have been downloding stuff lately and i cant controll the bandwith!!
    What u guys recommand !
    Thanks

    Hi Neji,
    Here you have all the content security options available on the ASA. I think only the CX doesn't apply to your HW but the other options are available.
    Block URLs using Regular Experessions (Regex)
    http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml
    CSC module:
    http://www.cisco.com/en/US/products/ps6823/index.html
    How to enable the CSC module:
    http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ssm.html
    ASA CX module (ASA 5512,5525,5545,5545,5555)
    http://www.cisco.com/en/US/docs/security/asa/quick_start/cx/cx_qsg.html
    Scansafe:
    http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/scansafe.html
    Configuration Cisco Cloud Web Security
    http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/protect_cloud_web_security.html#wp1559223
    Ironport:
    http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/ironport.html
    How to integrate the ASA with Ironport (WCCP):
    https://supportforums.cisco.com/docs/DOC-12623
    HTH
    Luis Silva
    "If you need PDI (Planning, Design, Implement) assistance feel free to reach"
    http://www.cisco.com/web/partners/tools/pdihd.html

  • Web Filtering Proxy Suggestions

    I'm looking into web-filtering & monitoring software to run in a small business (5 -10 users). Either for use on OS X Server or separate mac machine. Only basic requirements are online-updatable web site classifications and time controls. Anybody currently use anything which I can add to my list, in case I miss something?
    Thanks
    -david
    PS. I'm also looking at hardware based solutions for larger businesses (20-50 users) but this is maybe off-topic for an Apple forum... however...

    dfelicia wrote:Surely more than I need, but this is tempting me: http://www.amazon.com/gp/product/B006TO … B006TODPPS
    The price seems a bit high to me. I "only" paid around  $350 for my Core i3-540 system including a Lian Li PC-Q07B Mini-ITX case, 4GB G.Skill DDR3 ECO Ram and a 500GB 2,5" harddrive.

  • ISA570 - SPAM and Web Filtering Only

    I want to use my new IAS570 for SPAM and Web filtering but not as a firewall or VPN endpoint at this time.  I want to contune to use my existing firewall for the other 2 services.  Is it possible to do this and does the ISA570 need an external IP address in order to leverage the other functions?

    Steve,
    I believe you can accomplish what you are wanting by enabling Routing Mode (Networking -> Routing -> Routing Mode).  Routing mode basically turns off NAT on the device but allows the other security functions to still continue working.  So for example, this would be your configuration to add the ISA.
    Placement
    Internet -> Current Firewall -> ISA -> Network Switch(s) -> Workstations/Servers
    Example configs
    Current Firewall
    Outside IP - 1.1.1.1 /24
    Inside IP - 10.0.0.1 /24
    ISA
    WAN1 IP - 10.0.0.2 /24
    WAN Gateway - 10.0.0.1
    LAN IP - 10.1.0.1 /24
    Workstation/Server Gateway - 10.1.0.1
    Additional Configuration
    ISA
    Networking -> Routing -> Routing Mode
    Enable
    Firewall -> Access Control -> ACL Rules
    Add ACL Rule to Permit Any Any and ensure it's at the top of the list
    Security -> Dashboard
    Disable everything except SPAM and Web Filtering
    The ISA doesn't require you to configure an External IP on it.  You just need to ensure it has Internet Access to it can continue to get updates for the services you are utilizing.
    Shawn Eftink
    CCNA/CCDA
    Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

  • Overly restrictive Web filtering

    During the day, I'm connected to the Internet behind a very restrictive content filtering appliance. I'd like the ability to simply check my .Mac email and my GMail accounts during lunch, but those sites are blocked.
    What I'm envisioning is using a Web browser at my office (MSIE or Firefox) to connect to a server at my home on port 80 or 443. (Obviously, I'd like my home server to require some kind of authentication to prevent abuse, etc.) My home server would fetch content on my behalf from these other services on whatever ports are necessary (probably 80, 443, etc.) and funnel them back to me.
    I think the answer to my question lies in running my own proxy server at home, but I'm not sure of what my options are. Has anybody out there done something similar to his? I'm hoping for some starting points at the very least.... Thanks!

    Can you get away with whitelisting just the IP addresses and/or websites that your users need to visit? If so, you can probably use just your ASA. Otherwise you're going to want a good web filtering/proxy solution. Check out IronPort, Webwasher, Blue Coat, SurfControl, or even Squid (open source.)
    You can also tie the ASA directly into a filtering product like WebSense, check out the ASA documentation.
    When deploying a web filtering product you can either go "inline" or transparent by using WCCP redirection, but I'd suggest against it, since it breaks normal web browser behavior. Better option is to use WPAD (web proxy auto-detect) and have your browsers point-to and/or be explicitly configured to use the proxy.

  • DirectAccess 2012R2 - Web Filtering

    I have a need to do web filtering (I think). What I have is an external web site (not Corpnet) that can only be accessed from a Corpnet IP address range. Based on this When I go to that web site Split Tunneling sends the traffic down the client side ISP, and
    not down the Corpnet side.  Since the web site will only allow connects from certain IP address ranges I need that traffic to go down the Corpnet route.  I would like to keep  Split Tunneling turned on.  I did find this article (http://www.concurrency.com/infrastructure/web-filtering-for-directaccess-users-55/),
    but it deals with TMG and I'm not sure how to move that over to Window 2012 R2 DA.  Can someone help me with this?
    Thanks,
    Ken ...
    Ken Lutz - Spokane County

    Hello,
    You can try a specific Naming Resolution Policy in an additional GPO for your DirectAccess client based on the FQDN of you website.
    This will add the website into the NRPT tables and when your client will try to connect to it, the request will be sent to the DirectAccess infrastructure instead of the ISP.
    Gerald

  • Bex Query Variable error in Webi and Crystal for Enterprise

    Hi,
    We just upgrade to BOBJ 4.1 SP2 and BW7.4 SP5
    I am creating a webi report based on a BEx query. There is Variable on Period/Fiscal Year from BEX side(Mandatory prompt) when I try to create a Webi or Cyrstal for Enterprise report the below error pops up. Other Bex queries work correctly. Can it be the values in the variable the following values exist when execute from Bex i.e. 001.2012; Period 2013
    Is the SAP Note : 1611185 relevant for 4.1 SP2
    Error:
    com.businessobjects.sdk.core.server.CommunicationException$UnexpectedServerException: Termination message sent
    ABEND DBMAN (257): SQL Error: INTERNAL_ERROR
      MSGV1: INTERNAL_ERROR
    Is this True for BOBj4.1 SP2?
    http://scn.sap.com/thread/3362312
    Selection range variables are not fully supported in Crystal Reports for Enterprise.
    Message was edited by: Tienie Nothnagel

    Henry Banks wrote:
    > I know what you mean.  In BEx, it's automatic: the default values are pre-selected at runtime, based on user authorizations
    >
    > In WebI, user needs to do a 3-click workflow to select the authorized values from the prompt dialog. This can be broken down into 3 phases:
    >
    > (a) initialize prompt u2013 empty pane.
    >  (b) refresh list of values,
    >  (c) select response values.
    Thanks Henry! I was looking for this confirmation that it is a limitation of Webi and I'm not missing something.
    Henry Banks wrote:
    > ---> make this BEx variable u2018mandatoryu2019 u2013 this will trigger an automatic refresh mechanism on the list of values, and show it to the user.  This will eliminate steps (a) & (b).
    >
    It is not possible to set Authorization variables as mandatory. They are set to "optional" and cannot be changed (BEx limitation).
    Henry Banks wrote:
    > Unfortunately, BEx and WebI are not like-for-like replacement tools. Not all u2018normalu2019 BW features integrate natively into BObj.
    > So this will also have to be an excercise in positioning a new product to your onboarding users.  (i.e.  just click the button)
    > Regards,
    > H
    I understand that. Thanks for your suggestion.

Maybe you are looking for