Вы находитесь на странице: 1из 53

eSolution

una nueva generacin

Barracuda Web Filter (Advance).


Jessica Gonzlez eSolution Mxico

Agenda
Feature Overview New Features Custom Categores Installation Methods Product Selection

www.esolution.com.mx

Barracuda Web Filter


Integrated Content Filtering and Web Security Complete Content Filtering Solution
Nlock Web Sites by domain, URL pattern, or category Application Blocking Advance policy support

Award winning Web Security


Virus and spyware protecction at the gateway Integrated desktop spyware removal

Ease of Deployment No Peer User License Fees


www.esolution.com.mx 3

Barracuda Web Filter Architecture

www.esolution.com.mx

57 Web Content Categories

www.esolution.com.mx

Configuration Details
Allow: Legitimate websites Monitor: Websites prone to over use Warn: Websites likely have no busines purpose Block: Websites that are outside company policy
www.esolution.com.mx 6

Application Blocking

www.esolution.com.mx

Spyware Protection Startegies


Preventative, reactive & proactive measures
Block access to know spyware sites Stops spyware & virus downloads
Including drive-by downloads that are unknown to user often through ActiveX Blocks .CAB, .OCX, . EXE, and .DLL files

Detect & Blocks spyware access to the Internet


Finds and blocks existing spyware installations

Facilitates spyware removal


Informs Administrator of infected machines and infection type

Removes spyware from previously infect computers


Includes Spyware Removal Tool packaged as ActiveX control for Windows computers

www.esolution.com.mx

Firmware New Features


HTTPS Content Filtering Application Quality Control Authentication Enhancements
NTLM User Authentication LDAP Enhancements

Customizable Categories Peer to Peer aplication Blocking Blocked Application log

www.esolution.com.mx

HTTPS Content Filtering


Apply content filtering to encrypted content

www.esolution.com.mx

10

Application Blocking Updates


Peer To Perr Blocking Aplication Quality Control

www.esolution.com.mx

11

eSolution
una nueva generacin

Custom Categories.
Jessica Gonzlez eSolution Mxico

Create Customized categories

www.esolution.com.mx

13

Apply Custom Categories


Apply Globally

Apply by individual or group

www.esolution.com.mx

14

eSolution
una nueva generacin

Installation Methods.
Jessica Gonzlez eSolution Mxico

Installations Options
Evaluations
Audit Mode Installation

Deployment
Forward Proxy Transparent Inline

Very large networks


Forward Proxy and Web Caching Communication Protocol (WCCP) integration

www.esolution.com.mx

16

Installation Depends on goal


Evaluation:
Verifying Functionality Determining Suitability Transparent to network users

Deployment:
Determining Ideal installation method Smooth deployment with minimum network interruptions

www.esolution.com.mx

17

eSolution
una nueva generacin

Audit Mode Installation.


Jessica Gonzlez eSolution Mxico

Audit Mode
Testing option in high web traffic environments Appeals to large organizations or organizations wich are uncomfortable installing an inline device

www.esolution.com.mx

19

Installation Method

www.esolution.com.mx

20

eSolution
una nueva generacin

Deployment Installations.
Jessica Gonzlez eSolution Mxico

Standard Installation Methods


Forward Proxy
WCCP

Transparent Inline

www.esolution.com.mx

22

Forward Proxy

Pros: Solves some routing issues

Cons: Some policies can not be applied when installed in forward proxy * Application Blocking * Spyware protocol detection

Eases transition from existing forward proxy Requiered for WCCP installations

www.esolution.com.mx

23

Forward Proxy Firewall Considerations

www.esolution.com.mx

24

Transparent Inline

Pros: Allows all features of the web filter * Application blocking * Spyware communication blocking Harware Bypass * Failse stance

Cons: High Availability usually not possible

Policies not applied when in Hardware Bypass Single inline device

www.esolution.com.mx

25

Inline Placement Preferred

www.esolution.com.mx

26

Must Protect All Clients

www.esolution.com.mx

27

High Bandwidth Internal Trafic

High bandwidth traffic to extranet servers can be problematic Examples Streaming Media Do not size these situations on Internet uplink speed WCCP is a potential solution in networks with Cisco routers
www.esolution.com.mx 28

WCCP Inicial Setup

www.esolution.com.mx

29

WCCP Fail Safe

www.esolution.com.mx

30

eSolution
una nueva generacin

Subnets.
Jessica Gonzlez eSolution Mxico

WCCP Fail Safe

www.esolution.com.mx

32

WCCP Initial Setup

www.esolution.com.mx

33

Inline Placement Preferred

www.esolution.com.mx

34

Transparent Inline

Pros: Allows all features of the web filter * Application blocking * Spyware communication blocking Harware Bypass * Failse stance

Cons: High Availability usually not possible

Policies not applied when in Hardware Bypass Single inline device

www.esolution.com.mx

35

Forward Proxy Firewall Considerations

www.esolution.com.mx

36

Must Protect All Clients

www.esolution.com.mx

37

eSolution
una nueva generacin

Jessica Gonzlez eSolution Mxico

Cisco Systems Web Cache Communication Protocol (WCCP).

Cisco Systems
Web Cache Communication Protocol (WCCP)

Allows Content filtering in very large environments Allows High Availability

www.esolution.com.mx

39

WCCP Initial Setup

www.esolution.com.mx

40

WCCP Fail Safe

www.esolution.com.mx

41

eSolution
una nueva generacin

Subnets
Jessica Gonzlez eSolution Mxico

Working With Subnets


Most common setuo issue when customers complain that traffic is not flowing Usually just a simple configuration issue Defining static routes is often required
Layer 3 Switched networks Multi-layer Routed networks

www.esolution.com.mx

43

Remember:
If the network contains a layer 3 switch or routers static routes may be required

www.esolution.com.mx

44

Proper routing with static routes

www.esolution.com.mx

45

Proper routing with static routes

www.esolution.com.mx

46

eSolution
una nueva generacin

Product Selection
Jessica Gonzlez eSolution Mxico

Barracuda Web Filter


Powerful, easy to use & install
Intuitive user interface

Affordable
No per user fees

Available in six models:


Web Filter 210 Web Filter 310 Web Filter 410 Web Filter 610 Web Filter 810 Web filter 910

Energize Update Subscription Inline hardware appliance Complete scalability for growing organizations

www.esolution.com.mx

48

Barracuda Web Filter Feature

www.esolution.com.mx

49

Caractersticas

www.esolution.com.mx

50

Sizing Concurrent Users


Concurrents users in the most importante specification Usually, customers can estimate on their concurrent users based on their environment Examples
Knowledge workers might be have 1/3 to of their employees active at any time Custumer operations centers using Web applications might have of their employees active at any time Typical school and library environments with Internet kiosk workstations should size for all workstations to be concurrent users

www.esolution.com.mx

51

Sizing Uplink Speed

Uplink sizing is a validation to be applied AFTER sizing concurrent users Uplink speed is important because the Barracuda Web Filter is an inline device Choosing a Barracuda Web Filter inappropriate for the uplink banwidth will slow down all Internet traffic
www.esolution.com.mx 52

Gracias !!
www.esolution.com.mx

Вам также может понравиться