 |
|
|
|
|
|
|
|
|
Internet filtering can be done through installing software on servers or desktops or through firewall configuration and add-ons. There are major drawbacks to either approach, mainly with the complexity of setting up filtering effectively, the difficulty of maintaining associated filtering databases, and the problems integrating and scaling filtering for mixed network environments.
But these approaches also have their advantages. Blocking software is flexible; it is possible to compose both very general and very precise filtering rules. Firewall-based software is platform independent and works for the entire network, regardless of the configuration.
These advantages are available in a single resource: iPrism. iPrism has integrated blocking software, from both the industry-leading URL database, iGuard, and kernel-level filtering from integrated system tools. iPrism blocking software is also a network appliance; iPrism blocking software is plugged into the network as a transparent bridge and is absolutely secure — iPrism cannot be breached, hacked or disabled from inside or outside.
|
|
|
|
iPrism blocking software offers a dedicated filter appliance that has many advantages over trying to find compatible blocking software or easy-to-use hardware add-ons:
- Simple installation. iPrism blocking software is plugged in behind the firewall – and that’s it. There is no need to reconfigure the firewall or web servers and there is no additional blocking software to install. Every packet of traffic is monitored or blocked, no matter how many servers are on the network.
- Support for multiple Internet protocols. Most blocking software attempts to control instant messaging and peer-to-peer applications by blocking ports; malicious programs can circumvent this by simply sending packets over regular HTTP ports. iPrism blocking software provides kernel-level filters to identify the protocol being used, not just the port, so it’s more effective.
- Kernel-level filtering. iPrism blocking software also provides leverages tools within the operating system to filter packets based on protocol. Packets don’t have to be passed through an application, so filtering is faster. Kernel-level filtering means that no packet is ever dropped yet latency isn’t increased.
|
|
|
|
