RE: web monitoring tool

["Burton M. Strauss III" <BStrauss () acm org>]

Anything that has been recorded is subject to retention policies and legal
proceedings.  The very act of deleting a log may be construed as deleting
evidence UNLESS it is done in accordance with a written retention policy,
reasonable (after the fact to some court) and consistently applied.  Same
probably goes for excluding them from the normal logging you have in place.
Unless you have a written log policy and retention policy.

For your own protection, I'd get it clearly in writing:

"Recognizing that senior management may exchange privileged information,
e.g. attorney-client work product, corporate policy is to exclude from
logging all Directors and Officers of the corporation and individuals at the
VP or higher level."

The safest thing to go may be to get them a separate, unmonitored network
connection and a second PC.  Use some piece of commercial low end gear that
physically doesn't log anything and create a private (NAT) space using a
second connection to your ISP.  I.e. do it like the Military - unclassified
systems and classifies systems never touch.

-----Burton


-----Original Message-----
From: Trevor Cushen [mailto:Trevor.Cushen () sysnet ie]
Sent: Wednesday, April 09, 2003 11:45 AM
To: security-basics () securityfocus com
Subject: RE: web monitoring tool


Give them direct access with personal firewalls for security and delete
the logs for them.

Strange request from senior management?

-----Original Message-----
From: Imran Khan [mailto:ikhan () eudoramail com]
Sent: 09 April 2003 13:11
To: security-basics () securityfocus com
Subject: Re: web monitoring tool


couldn't find any matter on this one on the security focus website...

I am looking for an application to block net utilization at the desktop
level.

My boss wants to keep a select group's (mostly senior managers) internet
use confidential. She wants this to be done locally (desktop
application), so no logs are generated on the network admin end.

Is this doable?

Thanks for all the responses...

Imran



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------