-
"Web filtering for a small network, its best feature"
4.0 starson by Former Big Iron GuyPros: OOB customizable web filtering and access control for 4 users at varying security levels. More can be added for additional costs.
Bundled with decent enough firewall, anti-virus/spyware, reasonable entry price.
2nd level support is good. (a.)Cons: OOB is for one year filter subscriptions. Renewals cost almost as much as a new device. Conflicts with other security software/systems. DSD-150 very complex for such a small package. Not for the casual user. School laptop took additional work.
Summary: After I walked into the living room one morning in the wee hours and found my teen-aged son online, I decided to take a look at the router logs that evening. After checking the logs, and his destinations I found that this was the NOT first time he had been visiting porn sites, some of which were really nasty.
I turned on keyword blocking for his MAC immediately, and installed router logging software, then went looking for more tools.
The DSD-150 answered my immediate needs The web filtering does not slow web access down so far as I could tell. The Parental Controls: Categories, Block/Pass Lists, Scheduling, User and Computer Profiles are excellent and flexible, although non-simple to implement. Web blocking covers over 25 categories. Child porn is blocked by default, and should the block be disabled, a warning is issued.
Several levels of security are available, low, medium and high. The firewall, anti-virus, download blocking, features which require the download of a software client from the vendor site are in the high security profile. The web filtering is in the low profile and does not require the client. I wound up running the client only on the teen-aged boy's prc's, and enabled all the controls. One nice thing is a "safety lock" which has tunable levels that track the number of content violations and apply a lock based on the desired filtering level.
The architecture is provided by Bsecure Technolgies. Inc. I was told by 2nd level support that filtering, especially in the porn area is provided by St. Bernard, and the Firewall, Anti-virus/Spam is provided my McAfee. (a.) 1st level support sometimes was clueless.
The client does not play well with Avenquest / VCom's Systems Suite, or the CA security suite available from my ISP. This is why I only ran the web filtering on my home development platforms. Only Windows and Apple boxes can run the client, Linux clients will only be able to use the web filtering.
When my son's school system provided Mac Notebooks to high school students, as an IT Pro, I was very interested in the system wide roll-out. The school laptops were allowed to be taken home. The school's IT department set up a protocol on all the locked down Mac Laptops so that all Internet access was routed through the school system's Barracuda Spam Firewall. With all the Macs being locked down by the School System's IT department, I was unable to load the OSX 10.3/4 client. This caused a block on the Apple's Interweb access. I finally got it resolved by whitelisting the name of the Barracuda device in the DSD-150. After that, everything was okay.
A major shortcoming (IMHO typical of most pro-sumer level network products) Is a lack of a CLI or scripting interface.
The reason that I no longer use the DSD-150 is the annual cost factor. I have added enough machines to make the annual renewal costs excessive. I have instituted alternative measures, mainly by signing up with OpenDNS and setting my overall web blocking. Other measures are constantly being evaluated, and I'll put them in place.
--
In conclusion, if you are willing to pay the freight, both in administrative headaches as well as re-occurring costs then the D-Link DSD-150 is well worth it.
