This message was deleted.

OpenDNS is decent

We have Cisco umbrella implemented but Im not sure it can get a granular for our needs in the VDI and SBC environment. We use Palo Alto and the terminal services agent but the process of white-listing is pretty burdensome.

I agree it's a bit cumbersome on PA. Fortunately we don't have a lot of one-off URLs to whitelist. The use of categories has worked well.

pretty sure OpenDNS doesn't support DNS Delegation, which GSLB uses, at least that was the case a year ago.

Citrix Secure Web Gateway?

mix of pi-hole and opnsense

opnsense does URL filtering? cool.. Was thinking about switching to that at my house...

Was thinking pi hole as well

does pi-hole do true web filtering? like catagories?

No categories. Pi-Hole uses blacklists... If you find a „porn“-blacklist you are able to import it and blocking based on category :)

If you are looking for a prod web filter, not lab, Barracuda is something we used to use and is easy to whitelist URLs

Love pi-hole, and would recommend it, but it will produce an administrative overhead initially to whitelist a whole heap of host/domain names

You all see this? https://twitter.com/policypak/status/1161004095735513088?s=21

what would really add value there is if they can import a canned list of sites to block. 1 by 1 is way more cost in time than paying for a solution.