Web Content Filtering Device Selection
Short answer
B Deploy a proxy server to act as an intermediary that inspects and filters web traffic based on company policies.
Question
Which type of device should you deploy?
Key Takeaways
Tests knowledge of network security devices by distinguishing between passive monitoring tools (IDS/IPS) and active content control mechanisms (Proxy).
To filter websites available to employees on a company network, a proxy server is the correct device. This page explains how forward proxies enable policy-based web traffic inspection and filtering.
Common mistake: Candidates often select IPS or IDS because they are security devices, but they primarily focus on intrusion detection and prevention rather than granular web content filtering.
Expert Analysis
Why the Answer Is Correct
A proxy server acts as an intermediary between internal clients and external internet resources. It inspects HTTP/HTTPS requests and can enforce policies to allow or block access to specific websites based on URLs, categories, or keywords. This makes it the primary tool for web content filtering.
Why the Other Options Are Wrong
An Intrusion Prevention System (IPS) focuses on detecting and blocking malicious network traffic signatures and anomalies, not general web content categorization. An Intrusion Detection System (IDS) is a passive monitoring tool that alerts administrators to threats but does not actively filter or block user web requests. A Honeypot is a decoy system designed to attract attackers for study and does not manage legitimate employee web traffic.
Community Comment Notes
Community consensus strongly supports the Proxy server option. As Roattana noted, "A forward proxy server acts as an intermediary... allowing it to inspect, log, and filter web traffic based on company policies." This confirms that the core function required here is mediation and filtering, which only a proxy provides effectively among the choices.
Exam Strategy
When asked about filtering or controlling user access to specific applications or websites, look for 'Proxy' or 'Gateway'. Distinguish these from 'Firewalls' which control port/IP access and 'IDS/IPS' which control threat-based traffic.
Frequently Asked Questions
Why is an IPS not used for website filtering?
Can a firewall filter websites?
Discussion 1 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 1
-
Roattana 👍 1 Answered BA forward proxy server acts as an intermediary between corporate employees and the internet, allowing it to inspect, log, and filter web traffic based on company policies.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.