Re: [squid-users] Squid integration with Trend Micro Web Manager

Hello all,

We have integrated Interscan Web Manager with Squid. This is our setup.

Clients --------------> Trend Web manager ------------------> Squid

Trend Web manager is configured to use Squid as the upstream proxy. Since
Trend Webmanager runs on win2k, I had to go in for Two separate machines.
The advantage in this setup is that you don't have to change anything in
squid.

There is an added bonus here. We have implemented LDAP authentication in
squid. When the user logs in, Interscan Webmanager somehow sniffs out the
user name and faithfully puts it in the user policy window. Now you can set
policy and bandwidth quotas based on that user name. The settings follow the
user wherever he logs on from :-)

The downside is that Squid only shows Interscan's IP address on all the
logs, and IP based ACLs do not work. I have raised the issue with Trend
Micro.

Hope this helps.

Regards,
Michael Fuller,
Network Administrator - RAILNET,
Signal and Telecommunication Department,
Southern Railway,
Park Town, Chennai - 600 003.
India.
Phone: +91-44-25331962, +91-44-25348123 / 627
E-Mail : fullerms@sr.railnet.gov.in

----- Original Message -----
From: "Henrik Nordstrom" <hno@squid-cache.org>
To: "Lightfoot.Michael" <Lightfoot.Michael@comcare.gov.au>
Cc: "Sudarshan Sivaperumal" <sudar_siva@yahoo.com>;
<squid-users@squid-cache.org>
Sent: Tuesday, April 01, 2003 5:26 AM
Subject: Re: [squid-users] Squid integration with Trend Micro Web Manager

> "Lightfoot.Michael" wrote:
> >
> > > Anyone in this group integrated Squid with Trend
> > > Micro's Web Manager.
> > >
> > Not yet, but we are considering it. I suspect I'll need more memory on
> > the system running Interscan and squid (it is the only internal system
> > allowed to talk thru the firewall.) It seems simplest to have Web
> > Manager listen on a different port and use squid as the child proxy
> > listening on port 8080 (or whatever your browsers use.) This was you
> > can use squid's cache, ACLs or a redirector such as squidGuard to cut
> > down on the number of requests actually being passed thru Web Manager.
> > This should improve performance at least by a few percent.
>
> Another option which is rumored to work is to use the ICAP version, in
> combination with the ICAP client patch to Squid.
>
> I have not yet had the opportunity to test such configuration myself,
> and it should be noted that the ICAP version of Interscan is fairly new
> and the ICAP client patch to Squid is even newer and not much tested..
>
> Regards
> Henrik
>
>
Received on Wed Apr 02 2003 - 01:51:16 MST