ok thanks for you response, basically IPcop and SmoothWall have same addon and all things are pretty much same. like addons they provide, BOT , advance proxy. i have been using IPcop for years . i think i will end up on some limitations like time base ACls in last IPcop release we were allow to add only one time base ACLs. beside that we need some comprehensive and more extensive platform which only squid can provide. like time base acls, per group or per user bases Delay pool acls, per group or per user bases website controlling acls, per group or per user bases and many other option which are not available in both the firewall. and of course i am editing Squid.conf in Ipcop but when i refresh via Web console , web console overrides the whole config file so thats the reson i moved from IPcop or Smoothwall to MS ISA now i am coming back to SQuid for those reasons. Thanks On Fri, Feb 17, 2012 at 2:39 PM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > On 17/02/2012 9:32 p.m., Muhammad Yousuf Khan wrote: >>> >>> By "consolidated squid firewalls " did you mean security systems which >>> include both firewall software and Squid as sub-sections of the overall >>> system? >> >> yes exactly this is what i want actually i am replacing ISA server >> from our environment therefore i want to make this squid box smiler to >> ISA. so i want some features of NAT on this squid proxy box to NAT all >> the other traffic except Squid related. i just wanted to allow three >> more ports for different functionality. therefore i asked for help >> from experienced users that what they suggest in this scenario. >> because i don't wana use MS ISA any more however i need to make squid >> box to look similer to MS ISA box. at least basic features should be >> there which ISA is already providing. like Firewall features. > > > Aha. Okay. We have had a few admin the last few years converting from ISA tO > Squid. Some older Squid have slightly different behaviour for NTLM which can > seem a little weird at first. But other than that nobody has mentioned any > HTTP features lacking. > > > http://www.linuxquestions.org/questions/linux-security-4/isa-vs-squid-613656/ > > I have had a passing view of both Smoothwall and ClarkConnect systems. They > did seem good and either one may do exactly what you are looking for. > > I'm addicted to a iptables configurator called "ferm" myself. Its a command > line tool that takes a nice easy to understand config file format and builds > iptables rules. Same level of control and flexibility as iptables itself, > but easier to read and understand the configs. > > Amos >
