Internet access control: what to choose, or what do you use at work?

Question

Shaping

Hello everyone, in our organization (150 PCs), Traffic Inspector is used for control.
Pros
• Real-time channel monitor (as well as monitor by user, it's easy to see who is using the channel heavily).
• Shaper.
• It's easy to add a user (because we have DHCP, binding to mac is used, it is enough to enter ip in the program and it will determine mac in 1 click).
Cons
• Constant freezing of the server (different types of servers, network cards, different operating systems were used).
• Paid (despite its considerable cost, TI did not cope with the assigned tasks, so I don't want to buy something else to find out if it's good).
As a result it would be desirable
• Authorization of users on mac (or another, BUT transparent, and not on ip).
• You can easily find out who is downloading and at what speed, and turn it off.
• It is desirable that the shaper be dynamic.
• Statistics of who, where, how much, and when downloaded.
Very interesting, what do you use at work? And why?

Answer 1

Vyatta!

Answer 2

I recently asked myself the exact same question. I used TMG in the same place, in another division of UserGate, alas, I can’t say anything positive about UserGate.
I liked TMG very well, it performed all the functions assigned to it, but unfortunately it ordered me to live long until 2015.
I myself am now faced with a choice. One of the main conditions is automatically updated web filters.
TI - I don't even consider it.
a very interesting solution from Ideco, judging by their website, but have not tested it yet....

Answer 3

In general, I want it to be like a poll.
How many computers in the network
What program
+
-
Few features (well, for example, someone just needs authorization, monitoring, balancing, and someone auto-updates web filters)
The topic is relevant both for those who have nothing, and for those who have something he wants to change for the better.

Answer 4

There are about 60 computers from the network, 30 of them through NAT on the Internet, all through UserGate 5.4.xx.
You can create your own rules, tariffs, etc. All this has been working for five years already, I started with version 2.8 and gradually crawled up to 5.x, stably. Fortunately or unfortunately, I didn't find anything better.

Answer 5

There is still a lot of writing about squid, are there people who use it? what are the features with it?

Answer 6

Where you admins do not skimp, write a couple of sentences.

Answer 7

At school we use Squid (Zentyal) on 60-80 user PCs (average traffic is 10-20 megabits). Full of scripts to automatically update blacklists. In principle, completely satisfied.

Answer 8

Comrades, does nobody use Kerio anymore?
At first I thought to use TI too. But Kerio suits my requirements. Filters are configured, ports, traffic control, speed limiting, user access to the Internet by login and password. True, its maximum use was in the office up to 60 people, while there was a head office and an enterprise, and all this was combined into a subnet with access to local resources in both directions + there was one more branch. Now 2 separate organizations work with up to 20 people in each - nothing reboots, hangs, etc. - restrictions on access to Internet resources, ports, traffic control is not carried out + corporate mail servers work on Kerio Connect with several domains.