Security For Business

[Zahriya]

Im currently looking for security software to run on my business's work stations I employ over 30 employees who are in the age range of 17-25, so my primary targets are Myspace, and youtube. What is the best software in terms of selecting which programs are allowed internet access, and site blocking? Thanks for the help.

 

[mechBgon]

Just as a low-budget starting point, if you have a router that has keyword blocking, you could block the keywords "myspace" and "youtube" and see if the router can also block the use of proxies :camera:, then test to see if this creates any issues with legit work.

Another layer that wouldn't cost anything is to make OpenDNS your DNS provider, and use their settings panel :camera: to restrict stuff.


edit: fixed links

 

[MedicBob]

Edit Hosts file on each Windows box.

I prefer to stop the requests at the firewall though.

 

[Zahriya]

Originally posted by: mechBgon
Just as a low-budget starting point, if you have a router that has keyword blocking, you could block the keywords "myspace" and "youtube" and see if the router can also block the use of proxies :camera:, then test to see if this creates any issues with legit work.

Another layer that wouldn't cost anything is to make OpenDNS your DNS provider, and use their settings panel :camera: to restrict stuff.


edit: fixed links

Thank you. Ill give this a try. Any possible methods of getting around this? Also, is there a way to allow only certain programs, or websites for use of internet? I would like to disable the internet completely with the exception of one or two websites and my POS software.

 

[VirtualLarry]

Originally posted by: Zahriya
Thank you. Ill give this a try. Any possible methods of getting around this? Also, is there a way to allow only certain programs, or websites for use of internet? I would like to disable the internet completely with the exception of one or two websites and my POS software.

Sure. Use an application-based firewall. Configure it so that your programs are allowed access, and everything else is set to default deny.

 

[yinan]

ISA Server

 

[Crusty]

Originally posted by: MedicBob
Edit Hosts file on each Windows box.

I prefer to stop the requests at the firewall though.

That's such a huge administrative overhead to worry about, much much easier to go about this from a central management location, like the firewall or Windows Server.

 

[Zahriya]

Originally posted by: VirtualLarry

Originally posted by: Zahriya
Thank you. Ill give this a try. Any possible methods of getting around this? Also, is there a way to allow only certain programs, or websites for use of internet? I would like to disable the internet completely with the exception of one or two websites and my POS software.

Sure. Use an application-based firewall. Configure it so that your programs are allowed access, and everything else is set to default deny.

Im thinking this is the easiest route to go. Which software is the easiest on resources? Does Eset smart Security provide this? Thanks.

 

[JRock]

Originally posted by: yinan
ISA Server

Eww...

Untangle

 

[SecPro]

Originally posted by: Zahriya
Im currently looking for security software to run on my business's work stations I employ over 30 employees who are in the age range of 17-25, so my primary targets are Myspace, and youtube. What is the best software in terms of selecting which programs are allowed internet access, and site blocking? Thanks for the help.

I'm not going to address your question in a technical sense. There are good products out there that will do what you have described. Pick one that you're comfortable with.

My question to you is: Do your employees know that they aren't supposed to go to these sites? Do they understand why? I understand that even with thirty employees you are still a small busines but I think you are large enough, coupled with the use of POS software, that it may be time to start thinking about some formal IT policy and maybe some user agreements.

Policy, and user agreements, make it clear what the rules are. No technical solution is perfect and those that really want to will find a way around it. The point being is that you need to set behavior expectations as well as implementing security.