We use MS Proxy for around 600 clients. It has been for the most part,
reliable. The problems we have run into have been with Windows NT. The proxy
cache will occasionally crash one of the servers. Other than that it has some
nice features including the ability to block web sites (which we don't currently
use) and some other nice security features (only allow private IP address
ranges, etc.).
One piece of advice: If you do implement a MS Proxy server, I would recommend
implementing a fully redundant system due to NT problems. You can also use this
second server for load balancing.
Hope this helps.
Jim Lemieux
Carric Dooley <[EMAIL PROTECTED]> on 04/27/99 01:13:09 PM
To: Firewalls List <[EMAIL PROTECTED]>
cc: (bcc: Security/CT/ERNotes)
Subject: Proxy Servers
Hello,
I am looking for some opinions on 3 different proxy servers. After doing
some research, I will be evaluating MS Proxy, Netscape Proxy, and CSM
Proxy. Right now I am favoring CSM (in spite of the fact I had never
heard of it until recently). I have used MS Proxy quite a bit, but I am
not realy keen on it from a stability prespective. I have some
familirity with Netscape Proxy, but I wanted to see what everyone else
thought.
Configuration:
I will be using the http Proxy portion of the proxy servers almost
exclusively. I will be putting them behind a firewall. I am planning to
set it up so that only the http proxy can request outbound connections to
port 80 so users will have to use the proxy to surf the web. This will
allow me to use proxy authentication based on the NT SAM so I can generate
reports based on user ID instead of IP since we are using DHCP. I am
also looking to reclaim some bandwidth on my T1 via the local
cacheing the proxy servers can provide. At one site I have setup, we
were cacheing about 70% of our http traffic which helped out tremendously.
Thank you in advance.
Carric Dooley
COM2:Interactive Media
http://www.com2usa.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
