Security Basics mailing list archives
RE: web monitoring tool
From: Chris Santerre <csanterre () MerchantsOverseas com>
Date: Thu, 10 Apr 2003 17:25:05 -0400
Dialup may cause you more headaches. The may get malware into your network thru there. I would have the exec's bosses literally signoff on a piece of paper saying they understand that you can't be held accountable to network security if they put a big hole in your configuration. I tell my bosses the same. If you don't give me the control, you can't blame me when something happens thru a weak link. I've also seen execs fired due to surfing habits. The ONLY person in a company that can surf without fear is.......Sysadmin ;)
-----Original Message----- From: Imran Khan [mailto:ikhan () eudoramail com] Sent: Wednesday, April 09, 2003 8:00 PM To: security () nscs uk com; security-basics () securityfocus com Subject: Re: web monitoring tool I do agree with you Byrne and many others who sent responses to my query. I cannot agree enough that this is strange one... It is also a deviation from an overall corporate security policy. But executives are executives after all!!! I did relay my concern earlier today and made a recommendation that these executives use a dialup connection if they need to keep their privacy and sanity of others... I have yet to find out the real objective behind this requirement! Thanks every one who responded. Cheers, Imran -- On Wed, 9 Apr 2003 17:46:49 Byrne Ghavalas wrote:Hi Imran, The goal certainly is a strange one... Assuming that all the traffic goes through a firewall, I would assume that you could assign static IP addresses (or reserved DHCPaddresses)to these manager's machines. Then, you could create a rule on the firewall to allow the traffic through, but without logging. If the firewall does not support the option of no logging,then I wouldsay that the only other option I can think of is providingthe group ofmanagers with their own Internet connection. Also, if the managers use different workstations, this option won't really be effective. As the traffic has to end up going through the firewall one way or another, I can't see any desktop solution solving your problem. I must admit that it is rather bizarre that your boss would want to disable logging for these users. I can understand the your boss is probably thinking of the privacy for those managers, butlogging is notreally supposed to be used to spy on users activities, but rather to spot anomalies and hopefully help with troubleshooting and forensic investigations... Hopefully any staff that have access to this log information are trusted staff members with well-written contracts ;-) I would try and convince your boss otherwise, but eitherway, good luckin resolving your problem. Kind regards Byrne Ghavalas ----- Original Message ----- From: "Imran Khan" <ikhan () eudoramail com> To: <security-basics () securityfocus com> Sent: Wednesday, April 09, 2003 1:11 PM Subject: Re: web monitoring toolcouldn't find any matter on this one on the security focuswebsite...I am looking for an application to block net utilization at thedesktop level.My boss wants to keep a select group's (mostly senior managers)internet use confidential. She wants this to be done locally (desktop application), so no logs are generated on the network admin end.Is this doable? Thanks for all the responses... Imran Need a new email address that people can remember Check out the new EudoraMail at http://www.eudoramail.com ------------------------------------------------------------------- Is SPAM over-loading your e-mail server, disk space or bandwidth? SurfControl E-Mail Filter is flexible, intelligent andpolicy-drivenprotection. http://www.securityfocus.com/SurfControl-security-basics2 Download your free fully functional trial, complete with 30-days offree technical support.Stop SPAM before it stops you. -------------------------------------------------------------------Need a new email address that people can remember Check out the new EudoraMail at http://www.eudoramail.com ------------------------------------------------------------------- Is SPAM over-loading your e-mail server, disk space or bandwidth? SurfControl E-Mail Filter is flexible, intelligent and policy-driven protection. http://www.securityfocus.com/SurfControl-security-basics2 Download your free fully functional trial, complete with 30-days of free technical support. Stop SPAM before it stops you. -------------------------------------------------------------------
------------------------------------------------------------------- Is SPAM over-loading your e-mail server, disk space or bandwidth? SurfControl E-Mail Filter is flexible, intelligent and policy-driven protection. http://www.securityfocus.com/SurfControl-security-basics2 Download your free fully functional trial, complete with 30-days of free technical support. Stop SPAM before it stops you. -------------------------------------------------------------------
Current thread:
- Re: web monitoring tool, (continued)
- Re: web monitoring tool Peter Pandev (Apr 12)
- RE: web monitoring tool Trevor Cushen (Apr 10)
- RE: web monitoring tool Burton M. Strauss III (Apr 10)
- RE: web monitoring tool Robinson, Sonja (Apr 10)
- Re: web monitoring tool Imran Khan (Apr 10)
- RE: web monitoring tool David Gillett (Apr 10)
- RE: web monitoring tool Douglas K. Fischer (Apr 12)
- Re: web monitoring tool Jon Pastore (Apr 14)
- RE: web monitoring tool Ken Kousky (Apr 14)
- RE: web monitoring tool David Gillett (Apr 10)
- RE: web monitoring tool Chris Berry (Apr 10)
- RE: web monitoring tool Chris Santerre (Apr 11)
- RE: web monitoring tool Imran Khan (Apr 14)