Re: Blocking Access to web-based email
From: Frankster (Frank_at_SPAM2TRASH.com)
Date: 08/12/05
- Next message: Brad: "Re: How do I set up Cisco 1600 nat port range for pasv ftp?"
- Previous message: manu: "Re: Defeating Firewalls: Sneaking Into Office Computers From Home"
- In reply to:(deleted message) Leythos: "Re: Blocking Access to web-based email"
- Next in thread: Moe Trin: "Re: Blocking Access to web-based email"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 12 Aug 2005 10:41:57 -0600
> Many firewalls also allow the use of WebBlocking lists
Yes, I have used those subscription services too. Most (well, many, anyway)
firewall products endorse one blocking list or another, if not provide the
actual subscription service themselves. They do work.
However, I can also say that, if you have a large user base, you will incur
an increase in user trouble tickets asking why they cannot access a
particular website. They will often insist that there is no reason for this
site to be on any "blocked" list because it is totally fine. Sometimes they
are even *right* (false positive in the subscription database). Whether they
are right or wrong, there is a noticeable increase in admin time put into
tracking these things down.
Additionally, I have never found any subscription service that would act
promptly when advised of a "false positive". In fact, many don't respond to
your queries at all. All in all, I've found these services to be fairly
good. But not without incurring admin management overhead and the costs
associated with it.
Just food for thought.
-Frank
- Next message: Brad: "Re: How do I set up Cisco 1600 nat port range for pasv ftp?"
- Previous message: manu: "Re: Defeating Firewalls: Sneaking Into Office Computers From Home"
- In reply to:(deleted message) Leythos: "Re: Blocking Access to web-based email"
- Next in thread: Moe Trin: "Re: Blocking Access to web-based email"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]