How to tell if company is monitoring Internet & Email?

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

MadPeriot

Golden Member
Dec 5, 2003
1,012
0
0
I work in the IT department and everyone here thinks we have some monitoring tool but we actually don't.
 

imported_Strang

Platinum Member
Jan 8, 2001
2,177
0
0
Originally posted by: FoBoT
Originally posted by: virtualgames0
shouldn't the company already know what mac address goes to which computer?

uh, i don't know about most places, but we have thousands of pc's , hence thousands of nic's
we don't inventory / track/ record the MAC of every pc/nic we have , and we don't have a way to tie it to a pc serial number, let alone know who is using what pc/nic/mac

Yeah, same, we have an inventory tool that will match an asset tag to a PC and an informal internal spreadsheet that matches computer names to asset tags and serial numbers, but we don't track IP or MAC addresses.

Besides, if they couldn't find the NIC with that MAC address, it would be even more of a mystery.
 

DrPizza

Administrator Elite Member Goat Whisperer
Mar 5, 2001
49,601
167
111
www.slatebrookfarm.com
Originally posted by: biostud666
Just send some E-mails about you stealing from your work, and your going to blow it all up to hide the evidence, then you'll soon find out.

Duhhhhh.... you don't do that on your computer! Instead, there's gotta be someone in the office no one likes... send an email like that, **from his computer** (wait til he goes to the bathroom or something.)

Don't forget to include: "I've already planted the device." Then, you'll know really quickly if they monitor it. :D
 

civad

Golden Member
May 30, 2001
1,397
0
0
In my office, there are three simple rules:

a. No instant messaging.. ANYTIME
b. No Internet Radio between 8 AM - 5 PM
c. Nobody can run any servers ( without prior approval) / file sharing apps ( they scan for specific ports)

Other than that, we have a very easygoing policy. As long as users keep the above things in mind, the network admins dont trouble anybody over any other kind of use.
 

TitanDiddly

Guest
Dec 8, 2003
12,696
1
0
Send an email to somebody saying that you want to join Al Queda, and that you have 400lbs of TNT in your basement ready to go, and throw in a long list of 'buzzwords'. "kill bomb terrorissm kill osama bin laden saddam hussein" etc.
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
generally if you have to worry about that you shouldn't be screwing around anyway ;).

*whip crack*
 

m2kewl

Diamond Member
Oct 7, 2001
8,263
0
0
i can honestly tell you my company proactively monitors ppl's surfing and use journaling on mail servers...it's stated on employee handbooks.

one good thing being in IT, you can see which losers are pwn3d and written up for pr0n :D
 

yukichigai

Diamond Member
Apr 23, 2003
6,404
0
76
My workplace uses a proxy system which filters out webpages it deems "not work appropriate". I do not fear using the internet at work at all now, because (barring a few exceptions) if I'm not supposed to be somewhere, I can't get there.

The only real way to tell without raising any undue attention is to find a friend in the IT department, who you know won't turn around and put you under the microscope, and ask them. Anything else is pretty much illegal, though finding obvious clues is not.
 

compudog

Diamond Member
Apr 25, 2001
5,782
0
71
In a few months, I should have everything in place to do just that. One of our remote offices had their PC's loaded with spyware/adware and other nonsense. We will be installing a content filter once our new mail server is up and running. Currently we have a policy of work related emails only, web browsing during lunch/breaks, only MSN Messenger. Users are not permitted to install or attempt installation of any app without first consulting the IT dept.
 

TygGer

Senior member
Feb 20, 2003
393
0
76
I like to browse forums at work... and Im just a bit worried because most of the time, I would stay connected to internet while doing my work.

I know we use MS Exchange Server at work. Im not familiar with Exchange. Is this just for our email or also for our internet connection?
 

FoBoT

No Lifer
Apr 30, 2001
63,084
15
81
fobot.com
exchange is email (and calendar and all the crap that outlook supports)

it doesn't do internet

most companies use a proxy server if they want to closely monitor internet usage, but there are other tools also
 

Jzero

Lifer
Oct 10, 1999
18,834
1
0
Originally posted by: Strangone
Originally posted by: FoBoT
Originally posted by: virtualgames0
shouldn't the company already know what mac address goes to which computer?

uh, i don't know about most places, but we have thousands of pc's , hence thousands of nic's
we don't inventory / track/ record the MAC of every pc/nic we have , and we don't have a way to tie it to a pc serial number, let alone know who is using what pc/nic/mac

Yeah, same, we have an inventory tool that will match an asset tag to a PC and an informal internal spreadsheet that matches computer names to asset tags and serial numbers, but we don't track IP or MAC addresses.

Besides, if they couldn't find the NIC with that MAC address, it would be even more of a mystery.

But you can use DNS to figure out what IP had what computer's name. If you've got static IPs then somewhere you've got a record of which PC was given which IP address. If you're using DHCP then the DHCP server (at least the Win2k one) will tell you both the MAC and the name of each IP it assigns. Go ahead and toss the NIC; I still know which PC it was.

I will say that 99% yes, your company CAN monitor Internet and E-mail. They might not have a piece of software to make the process easy and automatic, but they are most likely logging everything.

I will also say that 99%, your company's IT professionals have much better things to do than proactively spy on you. They will only bother to spy on you if they are given a reason to, and that reason is usually "We want to get rid of TygGer. Is there anything in the logs that makes it easy to fire him?" or "We think that TygGer was looking at porn. Is this just an accidental click, or is it an ongoing thing?"
 

TygGer

Senior member
Feb 20, 2003
393
0
76
I will say that 99% yes, your company CAN monitor Internet and E-mail. They might not have a piece of software to make the process easy and automatic, but they are most likely logging everything.

Has anyone seen what these monitoring programs look like? Im sure it would say where you visited, but would it also show duration and activity (meaning would it show if the browser was left open but inactive?)?

Thanks all
 

Bumrush99

Diamond Member
Jun 14, 2004
3,334
194
106
I have worked for several IT Security companies, trust me when I tell you that vendors are constantly knocking on doors with statistics that show how much time is wasted a day by employees on the internet (like browsing the ATOT forums all day :)

There are software programs that can break down, in detail every website that has been visited and can categorize them in to certain groups like porn, sports, stocks, news ect..
From there the admin can create reports, with pie charts detailing the percentage of time you have spent browsing for fun as opposed to being on work related web sites.

Selling this software is the easiest thing in the world to do. For mid-sized companies that have huge IT budgets its a no brainer. The IT departments love it, it gives them another layer of control in their complicated networks. On top of that, companies are horrified at the prospect of being sued by disgruntled employees that get offended by websites they may have seen while passing someones desk. Employees can sue the company. The NY Times fired a bunch of people for browsing inappropriate websites without warning them.

Also, in the post 911 world, a lot of companies have spent thousands of dollars improving network security. Everything from firewalls to intrusion detection systems to content filtering. This software is just another piece of the puzzle in securing the network.

Even with all this, I still find it hard to stay off non work related websites while I am work
 

dolph

Diamond Member
Jan 18, 2001
3,981
0
0
just run a circumventer from your home computer. it's https, so no worries about company internet policy :)
 

imported_Strang

Platinum Member
Jan 8, 2001
2,177
0
0
Originally posted by: Jzero
Originally posted by: Strangone
Originally posted by: FoBoT
Originally posted by: virtualgames0
shouldn't the company already know what mac address goes to which computer?

uh, i don't know about most places, but we have thousands of pc's , hence thousands of nic's
we don't inventory / track/ record the MAC of every pc/nic we have , and we don't have a way to tie it to a pc serial number, let alone know who is using what pc/nic/mac

Yeah, same, we have an inventory tool that will match an asset tag to a PC and an informal internal spreadsheet that matches computer names to asset tags and serial numbers, but we don't track IP or MAC addresses.

Besides, if they couldn't find the NIC with that MAC address, it would be even more of a mystery.

But you can use DNS to figure out what IP had what computer's name. If you've got static IPs then somewhere you've got a record of which PC was given which IP address. If you're using DHCP then the DHCP server (at least the Win2k one) will tell you both the MAC and the name of each IP it assigns. Go ahead and toss the NIC; I still know which PC it was.

I was referring more to the fact that they'd have a NIC that mysteriously vanished, rather than to pin down which computer it was. ;)
 

alkemyst

No Lifer
Feb 13, 2001
83,769
19
81
The main thing to really worry about personal internet use is the sole reason most companies monitor it is it makes for an easy way to sever an employee.

It's one of those things everyone does (some abuse it though)....if you are part time or involved in a job where your production is the prime value you offer as opposed to you thinking of things / managing then it's sort of wrong (someone on an assembly line obviously will mess up things if they keep taking web breaks).
 

GeorgiaBadger

Member
Dec 2, 2000
137
0
71
Our Exchange admin routinely wears a shirt that states "I read your Email" I love that shirt. I am thinking I am going to get one that describes my job more in a fitting manner "I monitor your phone calls"
 

kranky

Elite Member
Oct 9, 1999
21,019
156
106
Originally posted by: alkemyst
The main thing to really worry about personal internet use is the sole reason most companies monitor it is it makes for an easy way to sever an employee.

I hope you all understand how true this is. I have a good friend who does commercial lending so he has contacts in many businesses and since he's very computer knowledgable, he talks to IT people frequently. When a company wants to fire someone, they search the logs and hope the person has violated some policy on internet use. That way they don't have to worry about getting sued for wrongful termination. The policy exists, it outlines the penalty for violating it, and the violations are documented. Done deal.

There are a lot of people out there screwing themselves. You must assume your company monitors email and browser usage, including sites visited and durations. Be smart.
 

m2kewl

Diamond Member
Oct 7, 2001
8,263
0
0
Originally posted by: kranky

There are a lot of people out there screwing themselves. You must assume your company monitors email and browser usage, including sites visited and durations. Be smart.

yeah, ppl are just dumb. i see ppl go to internet cafes and just hop into their online banking sites, work webmail, etc...come on! you don't know if the admin/previous person there put keylogging on to steal info.
 

Pliablemoose

Lifer
Oct 11, 1999
25,195
0
56
Originally posted by: her209
Systematically insult the IT staff via email, web, and IM.

I put a message on the bios splash screen @ work: "IRM is too stoopid to password protect the bios on their PC's" on a PC used by many people, it had a problem when I was @ work one day & you should have heard the IRM tech curse when he saw it after he rebooted the machine.
 

Nebor

Lifer
Jun 24, 2003
29,582
12
76
Originally posted by: Pliablemoose
Originally posted by: her209
Systematically insult the IT staff via email, web, and IM.

I put a message on the bios splash screen @ work: "IRM is too stoopid to password protect the bios on their PC's" on a PC used by many people, it had a problem when I was @ work one day & you should have heard the IRM tech curse when he saw it after he rebooted the machine.

So, it was you...
 

Pliablemoose

Lifer
Oct 11, 1999
25,195
0
56
Originally posted by: Nebor
Originally posted by: Pliablemoose
Originally posted by: her209
Systematically insult the IT staff via email, web, and IM.

I put a message on the bios splash screen @ work: "IRM is too stoopid to password protect the bios on their PC's" on a PC used by many people, it had a problem when I was @ work one day & you should have heard the IRM tech curse when he saw it after he rebooted the machine.

So, it was you...

Yep,

I used to be pretty bad about computer security @ work, got chewed out pretty good a few times & I've played it safe for years now, but the bios was just begging for a custom splash screen....