CPressland Posted August 21, 2007 Share Posted August 21, 2007 Hey all, I got called out to a office today where 7 PCs were all dead because one of the staff keeps going on Poker/Porn/Game sites. After finding a nasty driver on the hard drive I reformatted all the machines and reinstalled XP. Now they want a piece of software to block all these kinda sites and was wondering what the lovely people of Neowin recommend. Basicaly, I want to block downloading of EXE, ZIP, RAR files, disable adobe flash and block bad Malware Domains. What do you guys recommend? Thanks Link to comment Share on other sites More sharing options...
Mr Winkle Posted August 22, 2007 Share Posted August 22, 2007 (edited) if you want to make this secure, the only way to do this is with a proxy server which supports blacklisting or with a router which supports blocking sites - basically performing the block at the gateway. you might want to look at some enterprise solutions like bluecoat for ease and support or if you want to use a squid proxy, squidguard is pretty good i understand. sure, you can download plugins and add domains to the hosts file but they're all pretty easy to circumvent - even without admin rights. actually, i'd probably go down the route of informing this guys manager and using disciplinary sanctions, especially given this type of behaviour can lead to viruses and other nasties completely wiping the company data out. it's highly stupid behaviour and i think the management of the company would appreciate being told. Edited August 22, 2007 by Mr Winkle Link to comment Share on other sites More sharing options...
MarkusDarkus Posted August 22, 2007 Share Posted August 22, 2007 ^I agree. Link to comment Share on other sites More sharing options...
BAW Posted August 22, 2007 Share Posted August 22, 2007 Yup, you need to report this guy as he is violating his computer usage at work. But as Winkle said, the best option you have to completly block these sites and downloads is to use a proxy server, this is the most efficient at blocking and allows the best management of what to and what not to block. Link to comment Share on other sites More sharing options...
CPressland Posted August 22, 2007 Author Share Posted August 22, 2007 Thats the problem, The manager knows, but he NEEDS the guy so he cant afford to discipline him. Proxy servers looks like the way we'll have to go Link to comment Share on other sites More sharing options...
Brian M. Veteran Posted August 22, 2007 Veteran Share Posted August 22, 2007 Any "parental control" software should stop it - and you ccan use group policy to prevent them disabling things. As for the downloads, i'd personally use group policy to disable downloads completely, and disable them from accessing "internet options" (other than to clear history or do stuff they're not supposed to, there's no reason for them to have access to it). Link to comment Share on other sites More sharing options...
Tom Swiss Posted September 5, 2007 Share Posted September 5, 2007 Any "parental control" software should stop it - and you ccan use group policy to prevent them disabling things.As for the downloads, i'd personally use group policy to disable downloads completely, and disable them from accessing "internet options" (other than to clear history or do stuff they're not supposed to, there's no reason for them to have access to it). I heard FilterGate is great, but it's expensive, I never use it. "FilterGate prevents the viewing and downloading of adult content via its user-password-protected AdultFilter. AdultFilter gives you the added ability to build your own personalized list of sites to be blocked or accessed. FilterGate has now combined all filters into one friendly and easy-to-use package." Link to comment Share on other sites More sharing options...
Stup0t Posted September 5, 2007 Share Posted September 5, 2007 Its all about a matter of cost. You could setup an ISA server which could also double as a domain controller, then you are incontrol with active directory and totally lock down all the pcs :) If the net connection is via a router, most routers today can block certain sites :) Or if you are strapped you could install net nanny type of sofware. I beg to ask the question what type of company needs an employeer.... sack him and get two young student types for less money :) I think the manager needs to take control of the situation and do a bit of mind games with this person to make them feel they are not that important. Link to comment Share on other sites More sharing options...
whocares78 Posted September 5, 2007 Share Posted September 5, 2007 Yup, you need to report this guy as he is violating his computer usage at work.But as Winkle said, the best option you have to completly block these sites and downloads is to use a proxy server, this is the most efficient at blocking and allows the best management of what to and what not to block. he is only vilating it if the company has an acceptable use policy, if there is no policy, then he is not in violatinon however they should make one then bust his ass. ok finished reading : if he needs the guy that bad then he is screwed cause the emplyee will just do what he wants. as everyone else has prety much said, it needs to be done on gateway or proxy or router, that supports blocking these types of things, i know ISA server has a lot of blocking options, it all comes down to price. the real question is how much does he want to spend??? Link to comment Share on other sites More sharing options...
Recommended Posts