Cost Effective Web Filtering - AD Support

M

marley1

Supreme [H]ardness
Joined
Jul 18, 2000
Messages
5,447
What do we have for this?

Have a client of about 30 workstations and wants to web filter. Normally we can do OpenDNS and be done but they want integrated with AD. Filter staff, no Filter for Management.

Looking for the most cost effective solution.

Also what about for smaller sites that still want AD integration?
 
The suggestion I got last time was using pfSense, to dedicate one of the NICs as a second WAN port (configured for one of our multiple external static IP addresses), and using a newly creating VLAN to segregate managers from the rest of the company. Use a different DNS or something on that NIC. I never wound up doing that though as I was looking for something simpler.

The main con about OpenDNS is that it doesn't have AD integration or any features for intelligent filtering for very specific users, but something like this would likely require like a pfSense/DD-WRT module, or who knows -- I'm not a programmer or network engineer. :X
 
untangle will do all of that fairly easily... you'll have to pay for the AD integration though...
 
Well, as much as it pains me to suggest it, OpenDNS has AD integration. That said, I hate it but its probably a good option for you.
 
Sorry no open source. Looking to purchase an item.

No untangle

OpenDNS requires a VM to be running.

Rather have piece of hardware
 
I manage several fortinet devices, they are pretty decent with the newer firmwares (4.0mr3). But any appliance filter you get is going to be very costly for only 30 users.
 
I can't speak highly enough of sonicwall. Its fairly cheap for a UTM it works very well especially with AD. Very easy to setup.
TZ215 will do everything + other stuff. Multiple CFS policies, app filtering, and other AD assignable functions.

I use this in couple small school to the great frustration of the students that try to break it all the time. I also have a larger deployment for about 500+ students it pisses them off to no end.
I have it setup on multisites as well so I know very well how it works.
 
I hate to say it but Sonicwall looks like your choice,

Technicall you could get 30 users on a TZ100 but that may be pushing it with security services enabled.
 
You must log in or register to reply here.
Back
Top