How to control web browsing?

[scooterspal]

Hello all:

I have a small office network. All computers are Dell GX-150 P3's, 1ghz.
Connected via a Linksys BEFSR41 wired router to a DSL pro router.

Is there a way I can switch off (and back on) the web browsing ability
of certain computers from my computer and still have the network intact
for other uses.... file sharing, etc.?

I'd like to keep the browsing software (Firefox) on those systems, if
possible.

Thanks!

 

[Jaime Rodríguez]

Hello,

You will need a proxy or firewall, I recommend ISASERVER.....

JR.

 

[Phillip Windell]

Not with what you have.

ISA Server is a good choice as Jaime suggested, but ISA functions best when you
have an Active Directory Domain to leverage the authentication from.

ISA should be on a machine by itself and not mixed with other things.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx

 

[Philip Herlihy]

Hello all:

I have a small office network. All computers are Dell GX-150 P3's, 1ghz.
Connected via a Linksys BEFSR41 wired router to a DSL pro router.

Is there a way I can switch off (and back on) the web browsing ability
of certain computers from my computer and still have the network intact
for other uses.... file sharing, etc.?

I'd like to keep the browsing software (Firefox) on those systems, if
possible.

Thanks!

I don't know the specific hardware you mention but a hardware firewall
could well be a convenient answer. I use the Netgear FVS114
firewall/router connected to a separate modem (an integrated unit would
be simpler and may suit you better). The FVS114 is cheap as chips, and
allows logging of outgoing traffic and finely-tuneable blocking of
outgoing traffic from specified LAN IP ranges, optionally by schedule.
The trick is to find something just capable of doing what you want
without unnecessary complexity!

I was also asked by one client to look into whether I could block web
browsing (but not email) from just one computer in an environment where
changing the hardware wasn't an option. I found that on an XP Pro SP2
machine I could do this using IPSec (but it was very fiddly).

PH, London