Web Security

Unanswered Question
Aug 6th, 2009
User Badges:

Hi all.

With new variations of virus's, trojans, worms, malware, etc, I'm having some difficulty preventing this garbage from entering my network despite 4-5 layers of prevention beginning with spam filtering from my ISP. I'm wondering if a web security appliance might be a consideration and was wondering what others do to continue to allow users access to the internet but continue to keep their network safe and clean. Any feedback would be very welcome at this point.


To offer 2 side notes, my boss wants to use clustered proxy servers (I don't think this is the solution) and we continue to get hit with newer versions "Personal AV".


Thanks all in advance for your input.


Eddie

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Collin Clark Fri, 08/07/2009 - 06:19
User Badges:
  • Purple, 4500 points or more

Eddie-


I would lean towards proxy servers as well. A "web security" appliance is basically the same thing but can offer some other things like virus scanning. I have a couple of clients that use the web security appliances and love them. Internally we use proxies. Both work just fine. I guess size has a lot to do with it. My clients that use them are SMB so it's pretty cheap to deploy. We have 5000 users and that would be pretty expensive with a web security device.

eddienorman Fri, 08/07/2009 - 06:29
User Badges:

Good morning Collin.

Thanks for your insight. Our shop is relatively small supporting approximately 275 users, some scattered throughtout the state.


It's been a long time since I've had to use a proxy thinking MS Proxy 2 was my last exposure and deployment. Do you have specific recommendations for either a proxy product or web security appliance ?

srue Fri, 08/07/2009 - 07:55
User Badges:
  • Blue, 1500 points or more

i second the motion on the ironport web security appliance...(they also offer an email security appliance as well).

The ironport team at Cisco works in co-operation with the IDS team at Cisco so they stay VERY up to date on their signature releases.

Actions

This Discussion