it_user800895's Professional Profile

Badges

User Activity

About 6 years ago

Commented on The URL filtering policy makes rules to block a website where a user should not be able to access it

McAfee Web Gateway is a great product but you have bunch of alternative solutions sometimes proposed at a more attractive price. You can even build your own Web Gateway based on a Linux box, Squid and SquidGuard or pick a product such as CacheGuard that integrates them into…

Over 6 years ago

Commented on It is a well-priced option with reporting, Custom Block Pages, and AD integration

Thanks a lot for your feedback. What types of reporting are available in ForcePoint? A link to the documentation would be greatly appreciated.

Over 6 years ago

Commented on Customization allows us as consultants to tune web content filtering for the SMB market.

Is it possible to have your own white or black list of URLs? What about the maintenance process of those lists?

Over 6 years ago

Commented on The admin GUI is user friendly and easy to manage. Sometimes, Credential ID does not register a device.

Maybe a frontal firewall blocks the registration process... Have you tried to contact the support? With CacheGuard we have sometimes the same issues.

Over 6 years ago

Answered a question: Can I deploy Zscaller as a transparent proxy?

I would be interested to know constraints related to transparent SSL content scanning with this product. Thanks in advance.

Over 6 years ago

Commented on It is a well-priced option with reporting, Custom Block Pages, and AD integration

Regarding the reporting, what do you think about cons & pros of using a third party reporting tools feeded by logs coming from Forcepoint? Did you consider that? I would appreciate it if you could give me your opinion.

Over 6 years ago

Commented on Can send decrypted traffic to other security solutions for inspection

To me SSL inspection is actually an obvious "Man In The Middle Attack" disclosing the privacy of users even if it's quite mandatory from the security perspective. I believe that doing the SSL inspection inside an appliance is a compromise. But don't you think that sending…

Over 6 years ago

Commented on No need to maintain multiple devices on the data center and secure entire traffic.

So the SSL inspection is done at the IP level and not at the application level (with a transparent Web proxy for instance) with ZScaller. Do you have any information regarding the pros and cons of doing SSL inspection at the IP or HTTP level? What about the necessity to…

Over 6 years ago

Commented on Multiple customization options have allowed us to simplify the user experience without loss of productivity

Regarding the transparent SSL inspection, did you inform your users that their private SSL connections can be potentially disclosed? I assume that you had to import your own CA certificate into all Web browsers in your organization. Isn't it? In general do you have any…

Over 6 years ago

Commented on No need to maintain multiple devices on the data center and secure entire traffic.

Is it possible to transparently inspect SSL traffic with Zscaller? If so, what are constraints? And in general what to you think about SSL inspection?

Over 6 years ago

Answered a question: When evaluating Web Security Gateways, what aspect do you think is the most important to look for?

1- Minimal network architecture impacts. 2- Transparency for users 3- The technical support 4- Easy maintenance 5- TCO