Announcement

Collapse
No announcement yet.

Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

    I really need to start blocking those social sites and MSN Live Messenger, these guys spend way too much time on this kind of stuff...

    I've done alot of researches online, there isn't alot of solid answers ...

    It is a lot easier to do it if I buy a 3rd party plug-in software that works with ISA, however i do not have that kind of budget.

    So I have to work with what i have now.

    Firewall: ISA Server 2006
    Server: Windows Server 2003 x 4
    Client PC: XP & Vista & Win7

    what do you guys suggest ?

    Here's what I tried...

    to block social sites like facebook...

    I created a new access rule with HTTP & HTTPS protocols, action = deny, then I created a new destination "domain name sets", i call it "blocked sites".

    From there I added " *facebook.com"

    this blocks facebook, however it seems to be blocking some other sites too.
    or some sites just load partially.

    not sure what i've done wrong?


    On blocking MSN Live Messenger, I followed this KB from Microsoft
    http://support.microsoft.com/kb/925120

    It doesn't seem to work at all ??

  • #2
    Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

    I know with Forefront, I can create a list of sites, and create a rule that just denies access to that set.

    I have avague memories from ISA2006 that it may be possible to do same
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

      The normal way to do this with ISA is to create a URL set of blocked sites, and then use this URL set as an exception to the standard Internet Access Rule. However this is a bit clunky, hard to keep up to date, and often doesn't work due to the large numbers of URLs some of these sites use.

      The best way to get good Web Filtering with ISA 2006 is to use an addon such as Websense. However Forefront TMG is now RTM and (by paying subscription to Microsoft) the web filtering functionality is built in.

      Oh, and if you don't have an Acceptable Use policy make sure you put one in place in conjunction with Management and/or HR. This is a behavioural issue and if it is already not permitted then disciplinary action should be in the post for these users.
      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
      sigpic
      Cruachan's Blog

      Comment


      • #4
        Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

        Okay I just tried something different today and it seems to work fairly well...

        in the URL sets i added

        *.facebook.com
        www.facebook.com

        note the "*.facebook.com" instead of "*facebook.com"

        Regular web surfing is working as usual, and facebook.com is blocked completely.


        However, I want to grant access to myself
        i added myself as a new user sets in the "exception" list in Users, but it doesn't work, it has no effect. everyone is still blocked.

        How do you make an exception policy to grant access to certain computer/users?

        Comment


        • #5
          Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

          Easier is to create an additional rule above the rule you just created.
          However, if possible I really should try to start saving some money for either TMG or Websense.

          The administrative (future) overhead might reduce quite a lot.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

            You mean create an "allow" rule above the blocking rule i created?

            any idea how much websense costs? our enviroment is less than 10 users if that matters. i was checking out their site earlier but no pricing was listed, do i have to get it from one of their resellers?

            Comment


            • #7
              Re: Blocking Facebook, MSN, Youtube...etc with ISA Server 2006 ?

              Ah didn't know that. Well in that case websense might be a bit pricey.
              I don't know what the exact prices are. For that you indeed need to contact the resellers.
              Yes I meant creating an allow rule above the blocking rule.
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment

              Working...
              X