Restricting Bad Internet sites at Clients

[isha]

We have an ISA Server with about 40 clients. I want to know whether browsing of bad internet sites can be restricted/stopped at the Clients. If yes then what is the procedure? Thanks

 

[VRIT]

Isha,

The only sure way (to my knowledge) is to buy one of the many plug-ins for ISA, something like SurfControl or something similiar, this will then allow you to deside from a server point of view what your clients can and cannot access.

I hope that helps.

VRit

 

[fluid11]

You can do this natively in ISA server, no plugins necessary. This is done under the "Site and Content Rules" node in the ISA Management console. You can completely block websites or you can redirect user requests to a site. For example, you may want a user who is trying to visit

http://www.microsoft.com

to be automatically redirected to

http://www.redhat.com,

or you may just want this site completely blocked all together. Whenever a user on my network visits something like AOL, they are automatically redirected to a custom web page that says something like "Get back to work", or something to that affect.

I don't have an ISA server in front of me, so I can't give you specific instructions right now. Basically, you just create a content rule to Deny (or redirect) any requests to

http://www.somewebsite.com.

Let us know if you need some more help setting it up.


ChrisP

 

[dput]

ChrisP,

If you could give some instructions on how to do this, I would appreciate it. I tried a couple of times, and had no luck. Looks right, must be missing something small.

Thanks Dan

 

[fluid11]

Site and Content Rules allow you to control access to sites as defined by the destination sets that you've created.

Here's an example of how to redirect all *.microsoft.com requests to

http://www.redhat.com.

To create a destination set, go under Policy Elements - Destination Sets - add new destination set and name it Microsoft - add a name/IP range - under destination type *.microsoft.com - click Ok to save and close

Access Policy - Site and Content Rules - create a new rule - name it whatever you want - check either deny or redirect; I redirected to

http://www.redhat.com

- deny access based on destination - specific destination set, choose the destination set you created earlier


ChrisP