HOTSPOT & ISA 2004 /locking down ports

[taffygamali]

Dear Team

I read your remarks with ISA and surcontrol , now ISA is well known proxy/firewall loosing functionality content filtering /block downlaod extentions and especially proxy filter on https 443 is bad news .I DONT BELIEVE SURF CONTROL can block download extensions ? its mainly used as URL blocker .


Using your hotspot , you can enable filter http and hence block exe extensions but thats all CONTENT FILTERING RULES DO NOT APPLY , i used to be able to control yahoo voice but now i cannot as ive reduced my ISA to a transparent mode and client machine in no longer proxy I.E , DURING netstat -an i notice its sip .yahoo uses 443 for its way out , ISA is left helpless to block this .


Any suggestions?



Another point , hotspot has now GUI button to back up your user and ip-mac entries , incase one must rebuild the server and imports settings ? any suggestions to when this usefull functionality will be embedded in newer versions.


final questions, you should really have a third party firewall that you recommend and is fully compatible with your product to enable alot f the functionalty that todays IT personal need in a dangerous www environment .

look forward to your replies.

cheers
taffy

[alan]

1) ISA/Surfing is just one example. The key is that FirstSpot needs a "normal" Internet connection to function. You can do whatever content filtering in the next hop. Also, you might want to use FirstSpot Port Filtering feature in additional to your content filtering.

2) For upgrade, please check out chapter 5 of firstspot_guide.pdf. Refer to http://www.patronsoft.com/forum/viewtopic.php?t=945 for more information on v4 version history

3) We don't maintain 3rd party firewall list. Again, as long as from FirstSpot point of view, there is a normal Internet connection, you will be fine. Also, you might want to check out http://www.patronsoft.com/forum/viewtopic.php?t=1084 for more information on how to secure FirstSpot.
_________________
~ Patronsoft Limited ~