CP 300 FROM PAGE 33 Moderate policy, all of the usual porn everything and only allow whitelisted
hardware bypass so that network traffic sites I test with were stopped, and all of sites. In addition, the page that appears
continues to pass through it even if it theexternalproxyingsites wereblocked. when content is blocked informs the
fails. A helpful and informative wizard I was impressed that many of my efforts user why—for example, “filter avoid-walked me through initial configura- togetaroundfilteringusingforeignlan- ance real-time filter”—and provides a
tion, although I was disappointed that guages were blocked as well, although linktoaspywareremovaltool. This page
there was no way to configure can be customized easily.
SMTP authentication when The CP 300 excels at
configuring e-mail alerts. reporting. Reports can be
The main Web GUI is sorted by user, IP address,
separated into three main site, application (other than
categories: Report, Manage browser) and bandwidth
and Admin. Another draw- used. I could find specific
back to the product is that threats such as spyware or
there is no context-sensitive viruses that were blocked, the
help—clicking the Help but- sites that attempted to serve
ton downloads and opens them, and the workstation or
a PDF of the manual. The user who browsed that page.
streamlined GUI is easy to Any report can be displayed
use, yet at times it felt poorly as a table, pie or bar chart;
organized. For example, con- searched and filtered; and
figuring bandwidth utiliza- exported to Excel.
The home page shows important notifications and provides quick
tion for the WAN link is, for The CP 300 retails for
links to common Getting Started tasks. The management inter-
some baffling reason, under $2,995 for the hardware;
face is broken out into Report, Manage and Admin on the top left.
Admin, Configuration, Mis- the software subscription
cellaneous. Other than a few quirks, I did eventually get to native-language depends on the number of nodes sup-everything is where you’d expect it to Japanese pornography. ported and whether it’s one, two or
be, the GUI is responsive, and reporting A major disappointment hit when I three years. ´
is excellent. subverted the filter entirely by accessing
I synchronized the CP 300’s user well-known pornography sites through Matthew D. Sarrel is executive director
directory with my LDAP server and Internet archive sites like archive.org. of Sarrel Group, an IT test lab, editorial
started to build policies under the Man- Administrators who want to completely services and consulting company in New
age tab. I put users in groups; created lock down Web use can always block York.
rules for time of day, content category
and traffic shaping; and then assigned EXECUTIVE SUMMARY
those rules under the Policy Manager. It
seemed a bit cumbersome at first, but
ContentProtect Content Watch’s ContentProtect 300 is a 1U security
appliance that provides just about everything except a firewall for keeping employees
this modular approach makes it very
safe from Internet threats. This includes anti-malware, bandwidth management, appli-
easy to tweak policy later. To make it eas-
cation control and the product’s strong point, Web content filtering. Easy installation
ier to get started, ContentWatch provides
and configuration is augmented by a top-notch management and reporting Web GUI.
several ready-made policies, ranging
Any issues we have with this device are the same issues we have with all devices in
from denying all access to monitor-only.
this category, primarily that a clever employee can always outwit a content filter.
In most businesses, a good place to start
is with Moderate settings, which block COST ANALYSIS: At $2,995 for the hardware plus user-based annual software
certain Web content categories, allow license fees, the CP 300’s rich feature set makes it a fair value. There are more expen-
IM and prevent users from bypassing sive competing products with fewer features on the market.
the device through proxying. Those
default rules did a great job when I ran
through my usual content filtering tests.
Websense Web Security Gateway, St. Bernard iPrism Web Filter, Mi5 Networks
Google, Dogpile and Yahoo Safe Search
Webgate 005, BlueCoat ProxySG 200