bypass ISA server by using IP

[refaatae]

we block some sites by using destination set , but some users can open those site by typing thier IP address instead full domain URL . they got the IP by ping the site or using any domain check tools on the internet
how we can stop this???

 

[firthm]

You could specify a specific DENY rule in the firewall disallowing any connection to those IP addresses, is a bit of a pain though.

Purchase a web filtering appliance or Websense/WebMarshall to filter things properly for you...

Michael Firth
Network Infrastructure Officer

~If it's not broke, break it and LEARN~