web filtering/monitoring

Unanswered Question
Feb 22nd, 2009
User Badges:

Dear All,

We have one customer they need web filtering and monitoring product. Please advice me what can be the best solution. They have around 300 users. Can we give them iron port or ASA.

Your consideration in this regard will highly be commendable.

Thanks & Regards,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
clausonna Mon, 02/23/2009 - 06:50
User Badges:
  • Bronze, 100 points or more

Can you get away with whitelisting just the IP addresses and/or websites that your users need to visit? If so, you can probably use just your ASA. Otherwise you're going to want a good web filtering/proxy solution. Check out IronPort, Webwasher, Blue Coat, SurfControl, or even Squid (open source.)

You can also tie the ASA directly into a filtering product like WebSense, check out the ASA documentation.

When deploying a web filtering product you can either go "inline" or transparent by using WCCP redirection, but I'd suggest against it, since it breaks normal web browser behavior. Better option is to use WPAD (web proxy auto-detect) and have your browsers point-to and/or be explicitly configured to use the proxy.


This Discussion