#Nxfilter how to logout free#

Maximum persistent cache size adjusted to 300,000.

It is possible because NxFilter works at the DNS level. NxFilter is also capable of detecting malware and botnets based on DNS packet inspection. If it is a web proxy based filtering product, you can only filter HTTP and HTTPS, but with DNS filtering you can filter almost any protocol including HTTP, HTTPS, FTP, P2P as long as they use DNS. It is already transparent and does not cause “man in the middle attack” problem with HTTPS. Now NxFilter becomes the only DNS server your users can use.

You can block outgoing port 53 on UDP and TCP except NxFilter. It is also possible to force filtering on users. Then your users will use NxFilter as their DNS server and they will be filtering. You just need to set up your DHCP server using NxFilter as the DNS server for the clients.

#Nxfilter how to logout free#

If you go with a dns filter you are free from all these problems. And besides, this transparent proxy setup is quite challenging even for an experienced system engineer. Your browser will not send HTTPS request to your proxy if you try to transparently redirect the traffic. However, with the transparent proxy setup, you have a problem with HTTPS filtering as it breaks the browser’s ‘man-in-the-middle attack’ restriction. To make things easier, you can use so-called “transparent proxy” setups so that you don’t have to set up all the browsers one by one. If you use a web proxy-based filtering product, you must set up all browsers that point to the web filter as their proxy server. The most difficult part would be to force filtering on your users without too much trouble. When you deploy a web filter in your network. These web proxy agents act as local web proxy for one user only, so it does not cause network performance issues. One can imagine offering these web proxy agents, NxFilter is no longer a lightweight filtering solution. Currently, it supports secure search enforcement and URL keyword filtering, IP host blocking. NxLogon and NxClient themselves are local web proxies and they can do everything a web filter can do. But now NxFilter offers web proxy filtering through its agents, NxLogon and NxClient. You can’t force safe search and you can’t have keyword filtering against URL since it works at DNS level.

There are many advantages to just a dns filter, but we had to give up several things if we wanted to go with a dns filter this far. NxLogon is the Active Directory single sign-on agent for NxFilter and NxClient is the external user filtering agent for NxFilter.

With this feature you can block UltraSurf, Tor, uTorrent, Skype, Minecraft and other applications you want to block. NxFilter supports application control through its agents, NxLogon and NxClient. With NxFilter you can separate users and apply different filtering policies. That was the biggest obstacle to a dns filter being employed in real-world enterprise environments.īut as a dns filter, NxFilter offers 4 types of authentication methods for user identification. This is natural because the DNS protocol does not have an authentication scheme. Although it is faster and easier than the traditional web proxy-based filtering, DNS filtering had its own limit in the past.