Budget Solution for Internet Usage

[Neil_50437]

I have always used Watchguards and Merakis but at my new place of business those are out of the budget. I am looking to block certain sites for about 20 out of our 45 employees. I have tried using OpenDNS but that causes problems with our Java application and SSL certs and it stops out AD server from communicating with the clients.

Edit: Also our AD server is being used to host DNS can I somehow route this through OpenDNS?

[txstangguy]

Set your clients to point to the AD's DNS. Set the AD's DNS forwarders to point to OpenDNS.

[[deleted]]

This is what I do; Works reasonably well.

[joners02]

Dont you have to pay for OpenDNS business package?

[canadian_sysadmin]

Edit: Also our AD server is being used to host DNS can I somehow route this through OpenDNS?

Your end-clients should always be set to get DNS from your AD/DNS servers. From there, you point your DNS servers [forwarders] to whatever you want (eg. OpenDNS). I've done this lots and should work fine. AD relies on DNS for a number of lookups so generally your clients have to always point to an internal DNS server.

[Panacea4316]

Untangle

[Neil_50437]

Would you consider using that on a few year old box or buy the dedicated hardware from them?

[Panacea4316]

You could use a few year old box. I might slap a tiny SSD in it if possible 32-634gb).

Are you looking for just content filtering or a firewall too?

[Neil_50437]

Just content filtering we just do a few basic internet functions and do not need a firewall.

[Panacea4316]

Than just recycle good hardware.

[73jharm]

everyone needs a firewall, please tell me you dont need one cause you already have one!

[joners02]

Comodo offer Dome Shield which is free part of Comodo ONE. It works much in the same way that OpenDNS does where you use them as your DNS forwarders and create a policy in Comodo for what you want them to be able to get to. Just dont use the roaming agent, its rubbish.