Security

Ask something
Discussion Locked

Uploading Data

0 helpful
7 replies

by sameh fouad

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Can you tell how would I know if a user from my network upload data, there are many ways he can do this like by email or even online briefcase. How can I know this and prevent it?
Thanks

7 replies

by tobagoman

Put a sniffer and monitor their IP address. Show management and let them take the ball. You could block their internet access or the ports they are using via a firewall.

by toivo talikka

Your firewall may be able to provide statistics of incoming and outgoing traffic from the particular IP address. You may also be able to flag unusual traffic for logging, or enable only certain well known ports for outgoing traffic, to prevent peer-to-peer traffic from clogging up your network.

by mshavrov

First of all, you should check if you are allowed to do sniffing and spying on the user's activity. If situation will get hot, you may be charged for getting into "his personal life". Check with HR what you Policy says about using your company and Internet, if that person signed the policy, and if he is informed that security department can and will monitor his activity.

From the "technical" side, if you really doing the investigation upon this person, you could use a sniffer to monitor his port, you could generate reports from the firewall, you can even install "keystroke logger" on his PC. But again, IF YOU HAVE OFFICIAL APPROVAL.

Good luck,

Mike
CCSP, CCNP, CCDP, Security+, MCSE W2K, etc.
http://www.ciscoheadsetadapter.com

This discussion is closed to new replies.