Website blocking in a Citrix/TS Environment

[lanstar]

I have a small Citrix PS 4.5 server (25 users) and I need to be able to limit some users to a small selection of websites while allowing others full Internet access. The options that I have found seem to be very few and very expensive. Has anyone dealt with this and what did you use? Thanks.

 

[Dublin73]

unfortunately there's not really any neat way to do this with just Citrix. you might want to check out Microsoft ISA server. One option would be to use that as your proxy server, and allow access to particular websites based on Windows global groups.

Not sure how much the licensing would be, but probably not that much for 25 users or so

 

[pgaliardo]

We do pretty much what you are trying to do. It is similar to what Dublin73 suggested. We use Microsoft ISA Server as a proxy server then point all users Internet Explorer to that proxy via Group Policy. In ISA we have set up a few different groups, inclusding 1 group that can only go to websites set up in a pre-defined list and others that can go just about anywhere.

There is also some configuration that needs to be set up on the router/firewall so that only the IP Address of the proxy server is open to the outside world. This prevents users that are savy enough to bypass the proxy from getting to the web.

Not a cheap solution, but it does the job. Not sure if it's cost efficient for just 25 users.