Internet Usage and Monitoring software

[rpearson]

Im seeking advice for a single license , Internet usage and monitoring software solution. A client of mine has discovered that there is a "porn" problem, and currently has no protection or monitoring in place. This will need to be on a single desktop. This is not within a network infrastructure, this is a standalone workstation, connected to a DSL broadband internet connection, using MS Win XP pro platform.

My clients biggest concern is that the employee is doing this over the company internet connection.


Thanks ahead.

 

[linney]

Are there multiple users with their own passwords, or one general user that everybody just uses?

Website tracking
thread779-1230845

 

[gbaughma]

This is not within a network infrastructure, this is a standalone workstation, connected to a DSL broadband internet connection, using MS Win XP pro platform.

My clients biggest concern is that the employee is doing this over the company internet connection.

I'm a little confused.... a standalone workstation plugged directly into DSL. But a company internet connection?

Thoughts:
o If it's a company internet connection, why is it a standalone on it's own DSL line?
o Is the computer at the person's HOME, and they're connecting to the company network? VPN? If so, why would they connect to the company network first to surf porn?


I guess I'm not understanding the scenario completely. If it's a company internet connection, I'm amazed that there's no firewall or anything in place. If it's a single workstation with a DSL connection straight into the box with no router or anything, then software would have to be installed on the box, and if the person is computer savvy at all, they would spot it pretty quickly and disable it.

If the computer is on company property, the easiest thing to do would be to log on as the administrator, look around at temporary internet files and cookies and browsing history in IE. It's difficult to cover *ALL* your tracks when you're surfing, and a good snoop will usually find enough evidence to can someone if it is there. (This is the part of my job I don't really care for... when there is an allegation of an employee looking at inappropriate sites, I have to do a complete investigation; usually the outcome of that investigation will determine that user's employment. I remind myself, however, that it was THEIR CHOICE to surf porn on my network....)

Anyway, if you can give a little more info to the scenario, that would be great. Then I could wrap my brain around it and help with some suggestions (as well as potential legal ramifications....)



Just my 2¢
-Cole's Law: Shredded cabbage

--Greg

http://parallel.tzo.com

 

[rpearson]

No problem. Sorry for the confusion.

We will need to monitor one client, from another workstation, preferably. And yes the 2 machines will be networked through a small SOHO switch. As far as the messy network, I am working on a quote to help them with that

Ive been looking at this software :

http://www.track4win.com

The sad thing is , when I downloaded the software, the install pack was buggy from there server so I cant evaluate it yet.

The software suggestions can be either a single monitor platform or a multi station networked type. Right now they have no need for monitoring multiple client stations.

Thanks.

 

[gbaughma]

A software solution, unfortunately, is the easiest to circumvent.

The best solution, IMHO, would be a hardware solution, such as a SonicWall or other firewall that will do logging (either internally or through a syslog). I notice that some of the Linksys routers are now coming with Syslog capability.

You could drop something like that in, and set up the "other" computer with SysLog services, and every place either computer goes on the Internet will be logged. No software to install on the "monitored" machine, so there is nothing to circumvent.

Now, a few other things to consider:

1) Is there a company policy in place for acceptable use? If not, I would suggest you get one; unless the person is specifically looking at ILLEGAL (i.e. underage) porn, if you don't have a company policy to support action, you don't really have a leg to stand on.

2) As the person's manager, they need to ask themselves what they are hoping to accomplish. The goal of a good manager should be to have a better employee. If the goal is to get rid of the person....

3) And speaking of getting rid of the person... are you in a "right to work" state? If so, you don't even *need* a reason to let someone go. Unless they are union or in some other way protected.

The simplest solution (if the goal is to just correct the behavior and have a better employee) is to send out a memo to all employees reminding them of the acceptable use policy, and that since they are company computers they are subject to inspection at any time for acceptable use. I would make mention of "We reserve the right to monitor any network traffic on our corporate computers" etc. That is usually enough to scare someone into making sure they're staying appropriate.

<Laughs> In the past, when I've sent out something like this, I always get the "guilty conscience" people... "OMG... I was looking for ticket prices for my vacation next month... am I in trouble????" Stuff like that....



Just my 2¢
-Cole's Law: Shredded cabbage

--Greg

http://parallel.tzo.com

 

[fumei]

I am totally with Greg on this. If you do not have an Acceptable Use" policy, and one that is that is known, then you must start there.

No one can connect/logon to our intranet (either directly through the network, or VPN) without pressing OK on the Notice of Acceptable Policy.

faq219-2884

Gerry
My paintings and sculpture

 

[bchizary]

you may like the look of cybersitter- it can be installed on a pc and not visible, so users cannot end it or avoid it. Also it can mail you what users are up to daily.

It blocks sites and services dependant on updates it gets from the cybersitter website. I used to use it a company i used to work for, they didnt have any proxy servers or similar hardware solutions to block, so i just installed the program on any pc with internet access.
Best way to control people is to simply stop them from getting onto dodgy sites in the first place.

Regarding a policy- i agree with the other guys- you need a policy in place, signed by all the users as to what is acceptable use of a pc and the internet. You would want this in place to cover yourself even if you dont filter web use.

 

[harebrain]

The surfing history is already there on the machine. Free retrieval software:

http://www.codeproject.com/KB/vbscr...osition&view=Quick&select=2269816#xx2269816xx

(Thanks, cyberflash!)

 

[jimbuddy]

try using kiwi syslog. it will tell you what machine is going where by ip address. I can check any mahine in my office from my desk. I hear those ass kissers sucking up to the bosses talking about all the work there getting done , when they are actually playing. print the log and show them the door.

its free

cheers