Web Blocking on a PIX Box? 1

[NicBurns]

Hello,

Hopefully I am in the right location, my aplogies if not, does anybody know if the pix 515e has the capabilites to do web blocking on any level.


It's always a PEBKAC problem.

 

[lgarner]

Yes, using Websense or N2H2. We use Websense and it works pretty well.

 

[netadmin65]

We had some timing issues with PIX integrated WebSense
on PIX OS 6.3(4) and earlier, so we upgraded to 7.0(1).
Besides the extra functionality, it fixed the timing
issues with WebSense. I won't go into detail, but
you will need to research which platforms version 7.0(1)
will work on, and if you need any extra memory requirement.

So, bottom line.... PIX and WebSense work quite well
together. Only negative is the high cost of the filtering
subscription. A 3 year license will defray some of the
cost, and WebSense tech support was actually able to
tell me how to tweak my address space so I could use
a cheaper license (fewer users).

 

[hinesjrh]

We use Websense with our PIX 515e and it works well. I used Websense with a Nokia/Checkpoint firewall previously, and that worked well too. I recommend the Websense product!

 

[netadmin65]

It is not clear in the documentation, but to enable the
port-based and signature filtering, you need to place the WebSense Network Agent on a machine (mine is separate
from the WebSense server) that can monitor packets on the LAN. If you do not wish for this type of filtering, then the web content filtering from the WebSense server is still fine as a stand-alone product.