Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Program to monitor employee internet usage

Subject: Re: Program to monitor employee internet usage
Date: Wed, 28 Dec 2005 14:07:13 -0500
Not selling any product - at our facility we use Surfcontrol - Superscout 
product.

Spencer Hall
Sr. Network Analyst/ISO
St. Vincent's
Jacksonville, Fl

Chris Davis <davisfactor@gmail.com> 12/28/05 13:53 PM >>>
You might want to look at the Squid proxy and the log analyzer Sarg.

http://www.squid-cache.org/
http://sarg.sourceforge.net/sarg.php
If you look at the sample report on the Sarg site, you might notice
the graph and clock icons between the num and userid fields.  This
will show you a few stats about the user including what times the user
was on the Internet and how much bandwidth was consumed.

There seems to be a ton of log analyzers for Squid so if Sarg doesn't
seem to fit the bill, look at the Logfile Analysis link on the Squid
site.

This will require a Linux box and you'll also want to force everyone
to go through your proxy and deny ports 80 and 443 on your firewall
except to your proxy server.  If you run Active Directory, changing
everyone's Internet Explorer connection settings is very simple.

-chris


On 23 Dec 2005 16:49:48 -0000, invstg8r@hotmail.com
<invstg8r@hotmail.com> wrote:
A member of management has asked me to research available programs to log 
internet usage (web surfing) on our corporate network.

We are running a Windows server with a mix of XP and 2K clients.

What have some of you used to provide this in a report that management can 
use to show that a user is spending too much time on the internet?

I don't have a Linux box up and running, but if the right Linux based app is 
suggested, I would consider going that route.

Thanks in advance.

- Mark A.

P.S. Please try and keep this on topic, I've seen questions lke this before 
degrade into a privacy violation, "big brother" type of debate.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------



-----------------------------------------
NOTICE: This message is confidential, intended for the named
recipient(s) and may contain information that is (i) proprietary to the
sender, and/or, (ii) privileged, confidential and/or otherwise exempt
from disclosure under applicable Florida and federal law, including,
but not limited to, privacy standards imposed pursuant to the Federal
Health Insurance Portability and Accountability Act of 1996 ("HIPAA").
Receipt by anyone other than the named recipients(s) is not a waiver of
any applicable privilege. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the
original message. Thank you in advance for your compliance with this
notice.


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>