Now NxFilter becomes the only DNS server your users can use. You can block outgoing 53 port on UDP and TCP except from NxFilter. Forcing filtering to users is also possible. Then your users will use NxFilter as their DNS server and they will be under filtering. You just need to setup your DHCP server using NxFilter as the DNS server for its clients.
#Nxfilter p2p free
If you go with a dns-filter you are free from all these hassles.
#Nxfilter p2p plus
And plus this transparent proxy setup is quite challenging even for a seasoned systems engineer. Your browser will not send HTTPS request to your proxy if you try to redirect the traffic transparently. But with the transparent proxy setup you have a problem for HTTPS filtering as it is breaking the browser restriction for ‘man in the middle attack’. To make things easier you can use so called ‘transparent proxy’ setup so that you don’t need to setup all the browsers one by one. If you go with a web-proxy based filtering product you need to setup all the browsers pointing your web-filter as their proxy server. The most tricky part would be forcing filtering on your users without too much hassle. When you deploy a web-filter in your network. These web-proxy agents are working as local web-proxy only for one user so it doesn’t cause any network performance issue.
One might think providing these web-proxy agents, NxFilter is not a light-weight filtering solution anymore. Currently It supports safe-search enforcing and URL keyword filtering, IP host blocking. NxLogon and NxClient themselves are local web-proxy and they can do whatever a web-filter can do. But now NxFilter provides web-proxy filtering through its agents, NxLogon and NxClient. You can’t enforce safe-search and you can’t have keyword filtering against URL as it’s working on DNS level. There are many benefits only from a dns-filter but we had to give up several things if we want to go with a dns-filter so far. * NxLogon is the Active Directory single sign-on agent of NxFilter and NxClient is the remote user filtering agent for NxFilter. With this feature you can block UltraSurf, Tor, uTorrent, Skype, Minecraft and other applications you want to block. NxFilter supports application control through its agents, NxLogon and NxClient. With NxFilter you can differentiate users and apply different filtering policies. However being a dns-filter, NxFilter provides 4 types of authentication methods for user identification. It was the biggest obstacle for a dns-filter to be employed in real-world enterprise environment. This is natural because DNS protocol doesn’t have authentication scheme. But if you have NxFilter in your network it keeps cache for the DNS response from its upstream DNS servers and reduces the network traffic greatly and your users don’t need to wait for the response from these DNS servers on the Internet.Įven though it’s faster and lighter compared to the traditional web-proxy based filtering, DNS filtering had its own limit in the past. Their DNS queries need to be sent to these DNS servers on the Internet and your users need to wait for the response back from these servers. Suppose in your network everybody uses Google public DNS server or your ISP DNS server. This is because NxFilter keeps local cache for DNS lookup. Some users reported that after they installed NxFilter on their network their Internet speed improved greatly. You get no latency problem with NxFilter. Since it uses light weight DNS protocol there’s no need to have your traffic going through anywhere. It’s basically a forwarding DNS server with filtering ability. That’s DNS filtering and NxFilter is a dns-filter. This latency problem gets bigger when you have bigger number of users. This is because your web traffic needs to go through one point in your network that is your web-filter and it becomes a bottle neck in your network. But with this approach you might have a serious latency problem on your network. There are many commercial products based on Squid proxy. Traditionally we made a web-filter based on HTTP proxy server. NxFilter can do everything you can expect from a dns-filter or a web-filter. Now it provides web-proxy based filtering as well. NxFilter is a freeware web-filter designed for enterprise environment. Why do you need to go heavy when you have a faster, lighter option? Faster & Lighter WebFilter for Enterprise Environment
0 kommentar(er)
