We will be rolling it out in about 5 schools this month so I don't have any current experience, but we should soon! <g>

I installed Comsifter CS-8 last year in July. It is a great piece of equipment, but we just upgraded to the CS-8 Pro since it allows more monitoring and makes my job much easier.

Be aware that using proxy servers can allow students to bypass the Comsifter if you do not take measures to stop it. We currently let students have Internet in their rooms, but this is under re-evaluation since we are having some problems with it.

We have Com Sifter CS8- Pro which is the only product that is worth anything. The other products can be bypassed so easy it is not funny. We also use other products for other networks like Surfcontrol. GCA has five separate networks if you want to know why ask and I will explain. (I do not want to bore some people)

The product is pretty easy they use a lot of open source software with some of their own to make a Linux appliance. You must use their client software on your PC's for to have different levels of control or else everyone gets the same settings.

I have found it LDAP and Active Directory abilities limited by its need for client. We are working on developing a free filter and firewall which will require just purchase of the initial hardware but all updates will be free (because it uses Dans Guardian) this is work in progress if you are interested let me know and we can chat about it sometime. I am taking a break for two months to finish my masters in network security. Graduate in June thank the Lord.
Ernest

There is nothing on the market that can compete with Comsift products in terms of ability and price. There are many other enterprise level solutions, but they are overkill for what many schools need.

We have the CS-8 Pro. We installed it this last December, which turned me into the most hated person on campus (including faculty).

In regards to proxy issues. Comsift (the company) is continually finding and adding items to their blacklist to keep students away from anonymous proxy servers that can bypass the filter. In addition to what they continually add, I have added the following words and phrases to my filter shortly after receiving the product, with the help of Comsift's tech support to track down these sites (Words/Phrases > Custom A):
- anonymizer
- anonymous proxy
- bypass any firewall
- free proxy service
- includes a mini url-form on every html page
- phproxy
- proxie
- switchproxy

I've also had to add the following sites to my Banned Domain List (Filter Setup > Master Filter):
- addons.mozilla.org
- freebiproxy.com
- freeproxysurf.com
- tntproxy.com
- nomorefilter.com
- shadowsurf.com

These are by no means an exhaustive list. I usually find these my occassionally browsing the Access Log and Top Sites Log. Once students find a place that works, it spreads like wildfire. They are usually their own worst enemy.

You will notice that I had to add the Mozilla site above. A third-party person has written an addon to the FireFox web browser that allows one to bypass filters.

In regards to the client software, Identd, the software can be automatically loaded and started via Active Directory's Group Policy Logon scripts. The only drawback that I have found is that Identd cannot run under Apple's Mac OS X (but is does run under Mac OS 9).

He, he! The filter works so well I couldn't even preview my post. It wasn't meant to be such a mess.

here is some free web proxies

http://anon.emigrantas.com
http://proxy.emigrantas.com - text based
http://ircproxy.emigrantas.com - irc web client
http://anonymizer.co.nr
http://hidemyip.co.nr - text based
http://freewebproxy.no-ip.info
http://proxify.redirectme.net
http://hideip.sytes.net
http://secure.sytes.net
http://phproxy.zapto.org
http://cgiproxy.ath.cx
http://freewebproxy.selfip.net
http://keepprivate.homeip.net
http://keeprivate.homeip.net
http://preventto.getmyip.com
http://proxy.0dt.net
http://proxy.1.vg
http://freeproxy.512.be
http://freewebproxy.mooo.com
http://cgiproxy.viv.be -- ???
http://freewebproxy.dynu.com


enjoy them!

You do not need to search for working free web proxies. All is here.
Find free web proxy for desired country!
All proxies are regulary checked if they still alive.

http://getproxy.emigrantas.com
http://getproxy.ath.cx
http://getproxy.mine.nu
http://proxylist.getmyip.com
http://proxylist.homeip.net
http://randomproxy.ath.cx

enjoy them!

Our school has installed a CS-1, in conjunction with an internet proxy/network printing server. We also use Kerio Winroute Firewall. So far, the Comsifter DOES NOTHING! We configured the machine to the exact specifications recommended by Comsifter, and I can still access porn/hate/etc. from any PC on the network. We even hired a professional IT guy to come in and reinstall the unit - but it still doesn't work.

Have you worked with the Comsifter support on this, cause something is obviously not correct. The fact that you have another poxy may be a factor. If that proxy is up-stream of the Comsifter, then you shoucd configure it only to allow traffic from the Comsifter, and no other machines. Also, double check that the default gateway for all your machines is the Comsifter. Once again, try the Comsifter support because if they determine that the unit is defective, you will want a replacement.

Colin.