From: Nguyen Hoang Long (ng-hlong@hn.vnn.vn)
Date: Mon Mar 01 2004 - 15:40:34 GMT-3
Kenneth,
Agree with you that Websense can support all kind of internet traffic, but
that's for Websense itself only. To block/manage traffic, a network
equipment ( Firewall, Proxy, or Webcache) will have to take part in, and the
network equipment should also support filtering with all kind of traffic.
Have you check the configuration on the Websense Partner products such as
PIX fw ( the 'filter' command). There's only support for http/s/ftp ( at
this moment at least):
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref
/df.htm#1039734
When PIX works with N2H2, even HTTPS & FTP are not supported.
maybe in future, Cisco PIX will provide other protocols.
Long
www.vn-experts.net.vn
----- Original Message -----
From: "Kenneth Wygand" <KWygand@customonline.com>
To: "Nguyen Hoang Long" <ng-hlong@hn.vnn.vn>; "Todd Veillette"
<tveillette@myeastern.com>; "Masoud, Alaa" <alaa.masoud@hp.com>;
<ccielab@groupstudy.com>
Sent: Monday, March 01, 2004 8:47 PM
Subject: RE: Control Access to Internet.
> Nguyen,
>
> This is not true. While I'm not 100% sure about N2H2, Websense has an
> additional Protocol Management feature which can classify and control
> all sorts of Internet traffic:
>
> <snip>
> With the Protocol Management feature, Websense EIM can filter Internet
> protocols other than HTTP. This includes protocols, applications, or
> other
> data transfer methods such as those used for instant messaging,
> streaming
> media, file sharing, file transfer, Internet mail, and various other
> network or database operations.
> </snip>
>
> Kenneth E. Wygand
> Systems Engineer, Project Services
> CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design Specialist, MCP, CNA,
> Network+, A+
> Custom Computer Specialists, Inc.
> "The only unattainable goal is the one not attempted."
> -Anonymous
>
> -----Original Message-----
> From: Nguyen Hoang Long [mailto:ng-hlong@hn.vnn.vn]
> Sent: Monday, March 01, 2004 12:04 AM
> To: Kenneth Wygand; Todd Veillette; Masoud, Alaa; ccielab@groupstudy.com
> Subject: Re: Control Access to Internet.
>
> Kenneth,
>
> Websense/n2h2 solution will allow you to control Http/https/ftp traffic
> only.
> Here he wants to control all kind internet traffic. I would think of
> Netflow
> as billing method with either 'lock-and-key' or 'authentication-proxy'
> as
> the Controlling one.
>
> Vietnam CCNA/CCNP/CCIE bootcamp
> www.vn-experts.net.vn
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:11 GMT-3