NxFilter is a freeware web-filter designed for corporate environments. It started as a dns-filter. Now it provides a web-based filtering proxy as well. NxFilter can do everything you can expect from a dns-filter or web-filter.
Faster and lighter
Traditionally we create a web-based filter HTTP proxy server. There are many commercial products based proxy squid. But with this approach, you may have a serious latency problems on your network. This is because the web traffic you need to go through a single point in your network that web-filter and become bottlenecks in your network. This latency problem would be greater if you have a large number of users. But there is another approach. That DNS filtering and NxFilter is dns-filter. It's basically a DNS forwarding server with filtering capabilities. Because using a lighter DNS protocol does not need to have your traffic going through anywhere. You get no latency issues with NxFilter.
Increase your Internet speed
Some users report that after they are installed on their network NxFilter their internet speed increased rapidly. This is because NxFilter keeps local cache for DNS lookup. Suppose all your network using a Google public DNS server or a DNS server your ISP. they need a DNS query sent to a DNS server on the Internet and your users need to wait for a response back from this server. But if you have in your network NxFilter it makes cache for DNS response from the upstream DNS servers and reduce network traffic and user so you do not have to wait for a response from the DNS server on the Internet.
authentication
Although it is faster and lighter than filtering traditional web-based proxy, DNS filtering has its own limits in the past. It does not support user authentication. This is natural because the DNS protocol has no authentication scheme. It was the biggest obstacle to dns-filter to be employed in real-world enterprise environments.
But being dns-filter, NxFilter provides 4 types of authentication methods for user identification.
Faster and lighter
Traditionally we create a web-based filter HTTP proxy server. There are many commercial products based proxy squid. But with this approach, you may have a serious latency problems on your network. This is because the web traffic you need to go through a single point in your network that web-filter and become bottlenecks in your network. This latency problem would be greater if you have a large number of users. But there is another approach. That DNS filtering and NxFilter is dns-filter. It's basically a DNS forwarding server with filtering capabilities. Because using a lighter DNS protocol does not need to have your traffic going through anywhere. You get no latency issues with NxFilter.
Increase your Internet speed
Some users report that after they are installed on their network NxFilter their internet speed increased rapidly. This is because NxFilter keeps local cache for DNS lookup. Suppose all your network using a Google public DNS server or a DNS server your ISP. they need a DNS query sent to a DNS server on the Internet and your users need to wait for a response back from this server. But if you have in your network NxFilter it makes cache for DNS response from the upstream DNS servers and reduce network traffic and user so you do not have to wait for a response from the DNS server on the Internet.
authentication
Although it is faster and lighter than filtering traditional web-based proxy, DNS filtering has its own limits in the past. It does not support user authentication. This is natural because the DNS protocol has no authentication scheme. It was the biggest obstacle to dns-filter to be employed in real-world enterprise environments.
But being dns-filter, NxFilter provides 4 types of authentication methods for user identification.
- IP-based authentication
- password-based authentication
- LDAP authentication
- Single sign-on with Active Directory
With NxFilter you can distinguish between users and apply different filtering policies.
application control
NxFilter supports application control through his agent, NxLogon and NxClient. With this feature you can block UltraSurf, Tor, uTorrent, Skype, Minecraft and other applications you want to block.
NxLogon is an Active Directory agent sign-on from NxFilter and NxClient is a filtering agent for NxFilter remote user.
web-filtering proxy
There are many benefits just from dns-filter but we have to give up some things if we want to go with the dns-filter so far. You can not enforce safe-search and you can not have the URL keyword filtering as it works on a DNS level. But now NxFilter provide web-proxy filtering through its agents, NxLogon and NxClient. NxLogon and NxClient own local web-proxy and they can do just about anything to do web-filter. When Supports enforcing safe-search and URL keyword filtering, blocking IP host.
One might think providing web-proxy agent, the light filtering NxFilter not a solution anymore. But it still is. web-proxy agent works as a web-proxy only for one local user that does not cause network performance problems.
easy deployment
When you use a web-filter in your network. The most difficult part will force the filtering to your users without too much hassle. If you go to the product web-based filtering proxy you need to setup all-filter web browser pointed to you as their proxy server. To make things easier you can use what is called 'transparent proxy' setup so you do not need to setup all browsers one by one. But with transparent proxy setup you have a problem for HTTPS filtering as violating restrictions on the browser's 'man in the middle attack'. Your browser will not send HTTPS requests to your proxy if you are trying to drive traffic transparent. And plus the transparent proxy settings is quite challenging even for an experienced systems engineer.
If you go with the dns-filter free of all hassles. You only need to setup DHCP server uses NxFilter as a DNS server to the client. Then the user will use NxFilter as their DNS server and they will be under filtration. Forcing filtering for users is also possible. You can block outgoing port 53 UDP and TCP except from NxFilter. Now NxFilter be the only DNS server your users can use. This
===>> Click here to Download NxFilter 4.0.3
0 komentar:
Post a Comment
Click to see the code!
To insert emoticon you must added at least one space before the code.