Web security on Citrix Server

[pgaliardo]

I am looking for a product that does web filtering and works with Terminal Server/Citrix. Let me explain. We currently use Symantec Web Security. Symantec is not supportted through a shared interface. All of our users access the web through Citrix - there are no local desktops. With Symamntec, I can only set security per machine, which means everyone has the same access.

I want to do this by user, but according to Symantec, I can't. The reason is, if a user logs onto the terminal server with admin rights, he has set the rights for everyone that logs in afterward. So every user inherits the first user's rights, regardless of their login.
alternatively, if a user logs in with no acess, the subsequesnt users have no access.

Is there anyone working in a complete Citrix environment that has successfully set up access rights to the Internet, based on the user profile?

 

[Typoman]

I have the same problem. I need user based web filtering when all of my users are making web requests from the same IP (the terminal server). All of the solutions I have found identify the users starting with the IP that the request came from, and that always results in the same username being identified regardless of who actually made the web request.

 

[pgaliardo]

The only product I have researched so far that does this is Pearl Echo from Pearl Software, as previously noted in this thread. I have not tried it yet, but it is the only product I have seen so far that specifically mentions Terminal Server and Citrix environments.

 

[Binkie]

This may be a simple question, but let me reiterate what you are looking for to see if I understand this correctly. You want different users to be restricted from accessing different sites all through the same Terminal Server?

 

[pgaliardo]

Basically, that's it. All of our users use thin clients. They access the Internet through the terminal server. Most web security/proxy programs, including Symantec, which we use, only see that as a single interface. So all security and logging is based on that 1 IP address of the terminal server. It does not have the ability to break it down into individual users.

 

[Binkie]

Pgaliardo,

Ok, thanks for clarifying.

There is a tool that might help you accomplish most of what you are asking. SysTrack from Lakeside Software, designed specifically for Terminal Servers, can track per specific user id. The reporting facility specifies who accessed what site, when, and how frequently. SysTrack also has the ability to shut down sites you specify; but for the Terminal Server as a whole, not restriction based on each individual users.

Check it out when you have a chance

http://www.LakesideSoftware.com

Good luck!