Preventing download of certain file types

[nell1]

Hi all..

I want to be able to block downloads of certain file types from the web on our lan.

Our setup consists of about 40 comps, 1 Netgear RP614 router, ADSL Modem. Can configure the router to block certain sites but not prevent the download of certain file types. We have another office that has basically the same setup but with a SonicWall Soho3 firewall. This is pretty configurable but again I have not come across any facility to block downloads.

Not sure how I go about this one.. sounds like getting some software to load onto client machines... not too keen on that.

Would be really gratefull for anyone's experience on this one..

Many thanks

Nell1

 

[pansophic]

I believe, although I have never done it myself, that you can block the download of certain files, by type, using a proxy server. It can analyze the URL and determine if it is acceptable or not. I have used them to block the use Java Applets and ActiveX controls, but they can be bypassed by the net saavy. If they log into an SSL proxy outside of your network (commonly called an anonymizer) the you will not be able to view the content of their connection.

Take a look at Squid. It is an open source proxy, and even if it isn't your cup of tea, there is some good documentation on what you can do with a proxy server.

http://www.squid-cache.org

pansophic

 

[carrr]

Do you use a standard browser on the machines in question? i.e. Internet Explorer? If you're using IE as the standard, you should look into the IEAK (Internet Explorer Administration Kit)

http://www.microsoft.com/windows/ieak/default.asp

I think you'll find it useful...

 

[rn4it]

Nell1, in order to block sites with a Firewall, you would need to know it's IP's and deny them, not very practical, for to cumbersome to implement. Like pansophic mentioned, using a proxy server, you can ususally block types of sites(ie. adult, hotmail, etc) this way you setup then type of sites or access. Some of these proxy applications will even let you acces hotmail, but not download any attachments. There are many types of Proxy server apps, so you should be able to find one that will fit your company.

 

[nell1]

Hi Guys,

Thanks for the replies. Blocking certain sites is no problem, my firewall can take care of that. The trouble is preventing users downloading... the proxy server sounds like a good idea. Thanks for all you input chaps.. I'll do some research.

Thanks for getting the ball rolling!

Nell1