3 replies
by james r linn
We use Elron, which provides us with many capabilities including, blocking(we don't use a proxy, Elron wil do it for us), tracking, reports etc. There are a number of tools which do the same thing - some using proxies, some not.
We generally inspect the top X abusers to see whats happening, and focus on blocking certain types of sites - Elron has lists, but you will have to add your own.
We block warez sites, porn sites, real audio, web mail sites(potential for viruses).
But frankly I don't know why you dont want them to know. We try and head off inproper use by publishing the rules, making users sign copies of the policy, letting them know how and why we track etc. If they know all of that, and they still break the rules there issomething wrong.
Our rule is first problem is reported directly to the manager, and on the second, HR are copied.
For some contractors, its resulted in immediate dismissal, which I can't say is unfair because the rules are explained to them when the join the company.
Hope that helps.
James
As James said there are many tools out there. It goes further than just the tools.
In my organisation we implemented a policy on computer and internet usage. This policy allowed for small amounts of personal email and internet usage. At the time it was implemented every employee was given a copy. They then signed an acknowlegement that they had read, understood and would abide by the policy. This gives you the tool to take diciplinary action if the policy is breached.
We then track usage by setting up a proxy server. On the firewall reject port 80 from all internal addresses except the proxy and you will be able to track all internet traffic. You will be able to logg the sites visited as well as download amounts
Regards
by tbragsda
SuperScout http://www.surfcontrol.com/ makes a great product. Can be used in a passive mode, not as a proxy server, and still block sites. For a price, you get updated URL lists (auto right into DB). Nice reporting etc.
Eltron, as James pointout out is good. I'm using there email monitoring software.
Set written standards, and enforce them.
This discussion is closed to new replies.
Trending Security posts
Sort by Trending