Re: Cisco IOS Content Filtering

From: Lindsay Hill <lindsay.k.hill_at_gmail.com>
Date: Tue, 27 Nov 2012 13:42:05 +1300

Yeah, ScanSafe seems to be the way to go now. Check out the writeup @mengelm did about it at Packetpushers:

http://packetpushers.net/scansafe-saas-content-filtering-evaluation-setup-on-cisco-isr-g2/

Marc's right about being able to get around content filters, but it's not always about trying to stop EVERYTHING - it's just about catching MOST things.

Personally I like having content filtering that uses a different A/V to the one run on my desktops. Gives better coverage. For what A/V is worth anyway (not much).

Reporting is very handy too, being able to see how bandwidth is being used.

On 27/11/2012, at 1:04 PM, Guilherme Loch Waltrick Gses <glwgoes_at_gmail.com> wrote:

> I believe this has been put on EoL. The current solution for Web Filtering
> on routers is using the ISR connector to the Cisco Cloud Web Security
> (former ScanSafe) service.
>
> Guilherme Loch Gses
>
>
>
> On Mon, Nov 26, 2012 at 9:44 PM, marc edwards <renorider_at_gmail.com> wrote:
>
>> Looks like an Ironport for small/medium size business. It is aimed
>> more at ensuring web content is w/in realm of organization acceptable
>> use. I don't believe this will have much positive impact for zero day
>> threats, worms, viruses, etc...
>>
>> Also w/respect to web content filters... there is always a web proxy
>> to get around a web filter ;) Really cat vs. dog game and we don't
>> know who is doing the chasing.
>>
>> Marc
>>
>> On Mon, Nov 26, 2012 at 3:20 PM, Cisco Fanatic
>> <ebay_products_at_hotmail.com> wrote:
>>> ALL -
>>> What's your opinion on this? Can this be deployed as a
>> preventative/protection
>>> mechanism?
>>>
>>
> http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6643/prod
>>> _qas0900aecd804abb06.html
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 27 2012 - 13:42:05 ART

This archive was generated by hypermail 2.2.0 : Sat Dec 01 2012 - 07:27:51 ART