We have ~200 users and are currently using Blue Coat to filter web content. Basically we just block things like porn and streaming media. Our contract is coming up and the device is End Of Life, so we are looking for possible alternatives. I know that WebSense is popular, but we'd prefer something a little cheaper.
Have you used anything that you would recommend?
We use an Astaro Security Gateway device in our office and it works very well. It is essentially a linux server with a bunch of open source apps tied together with a proprietary web-based management front-end. You can purchase a license for just their software, or you can buy a packaged/branded server from them with everything pre-loaded and ready to go. They offer maintenance plans which continually update filtering rules and also covers software updates. It does firewall, nat routing, content filtering, ids, e-mail filtering, vpn, etc. I've found their support to be very helpful the few times I've needed a hand with something. They update the software fairly regularly and continue to add new features and correct obscure problems that anyone reports. Overall a great product designed specifically for what you're trying to do. I am not tied to Astaro in any way aside from being a satisfied customer.
Check out Untangle.
I can't post links, but it is at untangle dot com
Open source, can run on inexpensive or used hardware...
I'm using it at a couple of small businesses and it works great..antivirus, antispam, firewall, protocoal control, port forwardng, etc...
@pjz, it isn't a matter of them doing their jobs, its a matter of helping reduce risk to technology resources connected to a horribly dangerous internet!
I'm biased, I work for SmoothWall, www.smoothwall.net, but we do offer a cost-effective alternative to the two products you suggest - both of which, I might add, are decent kit!
Tom
My company uses SQUID with blacklists, but OpenDNS is VERY easy to use and configure...and FREE.
squid + black list with linux as router with iptables is tha best solution
Soon we bundling same with nice webuser interface .