North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

HTTP Proxies used for Fighting Spyware: Feedback

  • From: Two Bit
  • Date: Fri Sep 23 15:21:13 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=UjbvFJRPcoOF4sthZzFvkJ0VgoB8XX2EkWEXI/VRrgb70iGyaaUbeI/1OEkmVpZOfFYDNwHBo4mWil0BUT3De98jqYiX1oonpwHoAVr7wLBLrAJTcDhgagt5az6wHdB1dD9V9rIOLFYEnamTe96YylLINjD8goefYgOsQPI2IdA=
Hi there, long-time Nanog lurker network engineer with a (maybe off-topic) question related to network architecture solutions to fight the spyware/greyware problem.   I was wondering if anyone might have any experience deploying anti-spyware solutions which reside on HTTP Proxies.   Several products claim to be able to detect spyware on the wire such as ISS, SonicWall, Fortinet, Astaro, BlueCoat.  However, I am concerned about the performance, especially since they have to use an AntiVirus product on the back-end (heavy processing).  Curious what the user experience might be, how effective any of these solutions are in really catching spyware, and any other operational experiences from engineers employing any of these solutions out in the field (not from vendors, please) that may help narrow down the choices.   Thanks for any input.