port blocking and url filtering with PIX 506E

[karmic]

First question, need to block MSN messenger but need https (443) for online banking. Problem being, messenger now works over port 80 and authenticates via 443. How would a feller go about blocking with the router???

Second question, does anyone know how to properly filter url's with a pix? I can do it with server 2003 but i'd rather not throw another fail point at the server... Is there a way thru tftp? or some other free or cost effective way?

Thanks...

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[karmic]

ok, been doing a little bit of searching and am going to try using the local hosts file on each computer on the network... found one with over 20000 entries for adult sites and spyware and made my own additions to block msn messenger, etc...

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[lgarner]

N2H2 and Websense are currently your choices for url filtering. It doesn't necessarily have to be an additional failure point, since the Pix can be configured to permit access when the server is down.

I don't know how much they cost.

 

[wdoellefeld]

I like and use the IPrism appliance for web filtering (and reporting) from St. Bernhard. Check it out.

FRCP

http://www.frcp.net