Managed Security Services

MSSP Survey Part 4:
Managed Web Filtering Services

Fewer providers offer these services than offer anti-virus or anti-spam services.

by Lisa Phifer VP Core Competence, Inc. [January 18, 2005]

Managed Web filtering services (see table) permit or deny Web access and HTTP/HTTPS-borne content, based on destination (URL) or payload (Java, ActiveX). Pure-play Web filtering services are not nearly as common as standalone anti-virus and anti-spam services. In fact, less than half of the providers (see chart below) participating in this year's survey offer managed Web filtering. Those that do usually offer URL filtering as yet another option added to other CPE-based Managed Security Services.

The platforms identified in this year's survey were more diverse than in previous years, running the gamut from proprietary appliances (ClearPath, ISS, SecureWorks, SecurePipe) to third-party security appliances (Netscreen, SonicWALL, WatchGuard) to commercial software (WebSense, BlueCoat, TrendMicro) on other customer premises equipment (CPE).

Use of category-based URL filtering databases is common, although database updates range from daily to hourly to "as updates become available." Black and white lists are also common as an adjunct to category-based filtering to allow/deny exceptions. When choosing a Web filtering service, you'll want to look a bit deeper at service attributes than we can here—for example, consider whether exceptions can be defined per-user, per-group, or only globally. For example, PresiNET offers password-protected blocking override for privileged users, and SecureWorks offers quota-based exceptions.

Finally, as with any managed security service, reports are key to understanding service effectiveness. In this case, Web filtering services can help your company get an overall feel for how employees are using—or abusing—the Internet access you give them.

Conclusion
By conducting this annual survey, our goal is to provide useful insight for companies that might be in the market for Managed Security Services—and for ISPs searching for security partners to expand their business services portfolio.

Although we have attempted to present key Managed Security Service categories, characteristics, and selection criteria, most of these services are far too complex to represent completely in any survey. We strongly encourage readers to use our survey as a starting point for launching your own RFI/RFP which reflects the network security needs and policies of your business. Evaluate additional factors, like provider track record, references, and financial stability, that are equally (if not more) important than some of the specifics documented herein.

Once again, we would like to thank the providers that participated in this year's survey. Every MSSP continually sharpens and refines its offerings, so we urge readers to contact these providers directly for further information regarding any of these Managed Security Services.