Discussion Locked

Intranet security

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How can see the internet site visited on a PC?
If the user normally delete recent file, history and temporary file how can investigate on his navigation? If there is no way, how can avoid the deleting of this information??
Thank in advice

5 replies

by timthetoolman

Hi,

You can try undeleting the information. There are plenty of undelete tools around you can try, but its likely that at least some of the information will have been overwritten and lost forever.

To effectively track internet usage its best to enforce the use of a proxy server to access the internet. Log all accesses through it and periodically review those logs.

You can even ban sites through the proxy server if you feel that there are sites that shouldn't be visited. For instance weimplemented a list of banned pornography sites in ours a couple of years ago.

This list needs constant updating but it catches most of the unwanted surfing. In fact our internet usage dropped from 3Gb/day down to 1Gb/day even after the initial simple list was implemented!

Hope this helps,
Cheers,
Tim.

by napoli

Thanks for your answer, and another question. These 5 pc are connected on a 3COm officeconnet Remote 511. Every PC directly uses the TCP of the 3COM as gateway address, how can I introduce a proxy server?

by timthetoolman

Hi,

For such a small installation it may not be worth the expense.

You need to have one machine dedicated as a proxy server and install the software on that.

The machine should have two network cards. One goes directly to the internet - youwont need to use a router but you could if you want. I assume you have a DSL or cable modem? Plug the first nic directly into it.

The other card is connected to your router or a switch or hub and from there out to the PCs.

You can see that there is no way to get to the internet other than going through the proxy server.

The proxy server would do address translations for you (like your router probably does now) and log all the accesses (which is what you ultimately want)

The other good thing about a proxy server is that you can configure it to have cache. That means that many of the frequently accessed pages from the net become stored locally in this cache and access times are much much better for your users.

We used to use Microsoft's proxy server and have several Gb allocated to this cache.

How you actually proceed will depend on the proxy server software you choose.

As I said for only 5 PCs its quite a lot of work and expense so it may not be worth it in your case.

Cheers,
Tim.

This discussion is closed to new replies.