Block URL's?

[bofhrevenge2]

Hi all, I’ve just setup an ISA 2004 box and have started to get the hang of it. I've setup rules that prevent users downloading files with certain extensions but I am having trouble finding where I can ban sites specifically by URL.

Is this possible?

Cheers.


I don't mean to sound bitter, cold, or cruel, but I am, so that's how it comes out - Bill Hicks

 

[amarchi]

make a destination set containing sites that you wanna block.

 

[bofhrevenge2]

Yep i've found the Domain name sets feature now, it's a bit different to ISA 2000.

Cheers

I don't mean to sound bitter, cold, or cruel, but I am, so that's how it comes out - Bill Hicks

 

[bofhrevenge2]

Anyone know if there is a way to block sites by keyword filtering?

Cheers.

I don't mean to sound bitter, cold, or cruel, but I am, so that's how it comes out - Bill Hicks

 

[dput]

You would have to purchase a third party product to block sites by keywords.

Dan

 

[bofhrevenge2]

I thought i was asking a bit much.

Cheers.

I don't mean to sound bitter, cold, or cruel, but I am, so that's how it comes out - Bill Hicks

 

[fuunstatic]

it can be done as we have this implemented
(on ISA 2000 and 2004)

for ISA2004
configure a deny rule for "all users" when going to the destination set eg "blocked sites"

ensure this rule is above the allowed rules ie it should be rule number 1



The problem with troubleshooting is that sometimes it shoots back

 

[dput]

You can defintely block by the site url or ip address, but I don't think you can blcok by keywords as was asked.

Dan

 

[laney0906]

You should look at a third party product for definitive blocking. Websense is a good product that Ive just implemented on ISA2004 STD Edition. IT blocks by category rather than site, and manages its own URL list. Stops the need for large amount of admin updating URL's

(Good reporting product included)

http://www.websense.com

 

[basarab]

Hi all, I’ve just setup an ISA 2004 box . I need to know how to setup rules that prevent users downloading files with certain extensions but I am having trouble finding where I can ban sites specifically by URL. can anyone give me a instructions how to do this

Thanks

 

[bofhrevenge2]

In ISA manager - Firewall Policy open the Toolbox task pane and there is a dropdown called Network Objects, in there you can create URL sets.

http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/faq-urldomainnamesets.mspx

http://www.isaserver.org/articles/ISA2004_AccessRules.html

http://www.isaserver.org/articles/2004domainseturlset.html

"Horsey to king bish three