Blocking sites and downloads in the Office


Recommended Posts

Hey all, I got called out to a office today where 7 PCs were all dead because one of the staff keeps going on Poker/Porn/Game sites. After finding a nasty driver on the hard drive I reformatted all the machines and reinstalled XP. Now they want a piece of software to block all these kinda sites and was wondering what the lovely people of Neowin recommend.

Basicaly, I want to block downloading of EXE, ZIP, RAR files, disable adobe flash and block bad Malware Domains.

What do you guys recommend?

Thanks

Link to comment
Share on other sites

if you want to make this secure, the only way to do this is with a proxy server which supports blacklisting or with a router which supports blocking sites - basically performing the block at the gateway. you might want to look at some enterprise solutions like bluecoat for ease and support or if you want to use a squid proxy, squidguard is pretty good i understand.

sure, you can download plugins and add domains to the hosts file but they're all pretty easy to circumvent - even without admin rights.

actually, i'd probably go down the route of informing this guys manager and using disciplinary sanctions, especially given this type of behaviour can lead to viruses and other nasties completely wiping the company data out.

it's highly stupid behaviour and i think the management of the company would appreciate being told.

Edited by Mr Winkle
Link to comment
Share on other sites

Yup, you need to report this guy as he is violating his computer usage at work.

But as Winkle said, the best option you have to completly block these sites and downloads is to use a proxy server, this is the most efficient at blocking and allows the best management of what to and what not to block.

Link to comment
Share on other sites

Thats the problem, The manager knows, but he NEEDS the guy so he cant afford to discipline him.

Proxy servers looks like the way we'll have to go

Link to comment
Share on other sites

Any "parental control" software should stop it - and you ccan use group policy to prevent them disabling things.

As for the downloads, i'd personally use group policy to disable downloads completely, and disable them from accessing "internet options" (other than to clear history or do stuff they're not supposed to, there's no reason for them to have access to it).

Link to comment
Share on other sites

  • 2 weeks later...
Any "parental control" software should stop it - and you ccan use group policy to prevent them disabling things.

As for the downloads, i'd personally use group policy to disable downloads completely, and disable them from accessing "internet options" (other than to clear history or do stuff they're not supposed to, there's no reason for them to have access to it).

I heard FilterGate is great, but it's expensive, I never use it.

"FilterGate prevents the viewing and downloading of adult content via its user-password-protected AdultFilter. AdultFilter gives you the added ability to build your own personalized list of sites to be blocked or accessed. FilterGate has now combined all filters into one friendly and easy-to-use package."

Link to comment
Share on other sites

Its all about a matter of cost.

You could setup an ISA server which could also double as a domain controller, then you are incontrol with active directory and totally lock down all the pcs :)

If the net connection is via a router, most routers today can block certain sites :)

Or if you are strapped you could install net nanny type of sofware.

I beg to ask the question what type of company needs an employeer.... sack him and get two young student types for less money :)

I think the manager needs to take control of the situation and do a bit of mind games with this person to make them feel they are not that important.

Link to comment
Share on other sites

Yup, you need to report this guy as he is violating his computer usage at work.

But as Winkle said, the best option you have to completly block these sites and downloads is to use a proxy server, this is the most efficient at blocking and allows the best management of what to and what not to block.

he is only vilating it if the company has an acceptable use policy, if there is no policy, then he is not in violatinon however they should make one then bust his ass.

ok finished reading : if he needs the guy that bad then he is screwed cause the emplyee will just do what he wants.

as everyone else has prety much said, it needs to be done on gateway or proxy or router, that supports blocking these types of things, i know ISA server has a lot of blocking options, it all comes down to price. the real question is how much does he want to spend???

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.