id="info"

Question

Locked

Block Internet Access trought Mobile USB adapter

By cristiano.oliveira ·
Some desktops on my network are not allowed to use internet connection but they need Internet Explorer to access local Intranet Web, they are blocked on the Router Firewall to avoid accessing to outside Internet, but some of them are using the Mobile USB adapter to access the internet using a mobile operator, how can I avoid them to access the internet?

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Two thoughts: policy and policy

by robo_dev In reply to Block Internet Access tro ...

Policy: Do you have a policy that forbids this? Are your users required to follow policy?

Windows Group Policy: If you block the user ability to change the proxy setting in Internet Explorer, then their wireless interface will not work, as long as they are not permitted to install software (e.g. an alternate web browser program).

http://technet.microsoft.com/en-us/library/cc775996.aspx

Collapse -

Two thoughts: policy and policy

by cristiano.oliveira In reply to Two thoughts: policy and ...

The problem is that some of them are Administrators of there desktop computers and could install other browsers, so that hint shouldnt be enough.

Collapse -

There are utilities to block the usage of USB drives and wireless adapters

by robo_dev In reply to Two thoughts: policy and ...

Checkpoint DiskNet Pro, for example, can block all unappoved interfaces, and also can be configured to block or allow other devices such as writing to CD-ROMs, USB jump drives, floppy drives, etc.

I have worked with a large financial institution who deployed DiskNet Pro with good results. they configured it such that only certain people could burn CD-ROMS, nobody could use wireless of any sort, and one approved company-issued USB jump-drive was allowed, but encryption is mandatory for those devices, as enforced by DiskNet.

DiskNet can also allow approved CD or DVD writing storage devices, but force them to encrypt the data.

http://www.checkpoint.com/reflexmagnetics/products/disknetpro/index.html

Collapse -

Is there an easy way?

by cristiano.oliveira In reply to There are utilities to bl ...

Is there an easy and unexpensive way to do this?

Thank you.

Collapse -

Put your foot down!

by patb071 In reply to Is there an easy way?

Are they higher up on the food chain? If you have a policy saying no internet access and they are working around it its time to start canning some people. I imagine you say no games and they are playing games all day. Anything you do they will just find a way around it why spend time and money?

Collapse -

Put your foot down!

by cristiano.oliveira In reply to Put your foot down!

You are correct but I need to stop them, anyway!

Collapse -

Well you can make some progress with group policy

by robo_dev In reply to Is there an easy way?

but clever users will be able to undo this work since they have admin access. I guess you could work to come up with ever more complex and clever group policies to make it tricky for admin users to undo the policy.

Sort of a cat-and-mouse game with GPO versus the user.

For example, if you deploy a broken version of the Plug and Play service to PCs, then no hardware can get installed. The user would need to reinstall the windows files to make it work.

If you have physical control of the PCs you can go into BIOS, disable USB altogether, then password-protect the bios. Some organizations actually super-glue connectors into the USB ports, believe it or not.

The problem, of course, is that Windows 'plug-and-play' is a blessing for users and a curse for administrators.

The use of a utility such as DiskNet allows you to define a set of policies, deploy them from a central console to PCs, and the DiskNet Client on the PC makes sure these policies get deployed. And it does not matter if the PC users have local admin rights with DiskNet.

Collapse -

lock down USB

by shasca In reply to Block Internet Access tro ...
Back to Browser Forum
9 total posts (Page 1 of 1)  

Software Forums