Reply to Message
Block all UDP traffic at the firewall
We've solved our Internet (ab)use problem by blocking all UDP traffic that attempts traverse our firewall. Our firewall forwards DNS requests/responses to/from our ISP's DNS servers. So far, no enmployee has come up with a valid reason for needing UDP for work-related Internet access. If they want to surf, we let them. It will be obvious if they're wasting working hours on the Internet by the amount of work that gets done. Those that waste too many working hours, lose Internet entirely.