• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

track users internet use

Brazen

Diamond Member
Is there some way we can track what sites are visited based on the logged on user? Something like a chronological order of pages and links visited?

We just had our internet slow down to a crawl. Looking through SonicWall reports we thought we would find someone streaming radio or something "innocent" (it's not a punishable offense here, we just block the radio sites as we discover them), but instead there was a ton of traffic from a workstation to a porn site (missed by our content filter). I promptly vnc'ed into the machine in question, we know who was logged on at that time, but by then the word had already gotten around that someone is bogging down our internet connection and every need to stop playing around. By the time I vnc'ed in to this computer, bandwidth was back to normal, and I could see this user emptying their trash and then repeatedly double checking their IE history and drop down address bar, all of which were completely empty, so I was not able to get their history that way.

So there is my long winded story.... what I would like is something that would track users internet usage based on user rather than computer and then keep it for like a few days so we can review it if needed.
 
I know that ISA will do logged in user, as you can set it up to require authentication for a user. You can then also split them into different groups/rulesets. Kinda a biotch to get setup the first time
 
Originally posted by: n0cmonkey
Originally posted by: Brazen
Originally posted by: randal
Use a proxy, either squid (www.squid-cache.org) or ISA server for Windows.

Well, I was thinking about that but I THOUGHT that squid could only track by computer name(?)

Isn't that enough? You should be able to find out who was logged into a particular computer at a particular time...

Well, it's not conclusive. We have some computers that are shared among multiple people, and some could say they were out to lunch or something and somebody else must have used their computer.

In this situation, we caught it within a matter of minutes and the guilty person was obvious, but that is only because we were investigating the bandwidth issue. Usually we don't get a report on web usage, by computer, from our SonicWall gateway until the next day, and by then any number of people could have used the same computer.
 
Originally posted by: Joemonkey
sounds like you need something like Websense on your network

Well, unless I'm missing something, websense (gathered from their website) looks like it is a filtering software, but we already have filtering software. Somehow this guy found a porn site (probably a new one) that hadn't made it into the filter database yet.
 
fire that guy...if he has enough time to find the newest, not filtered pr0n, he isn't getting much done.
 
Originally posted by: Brazen
Originally posted by: Joemonkey
sounds like you need something like Websense on your network

Well, unless I'm missing something, websense (gathered from their website) looks like it is a filtering software, but we already have filtering software. Somehow this guy found a porn site (probably a new one) that hadn't made it into the filter database yet.

it is a filter and a monitor
 
Originally posted by: nweaver
fire that guy...if he has enough time to find the newest, not filtered pr0n, he isn't getting much done.

Oh, he is fired. It just made me think, in this situation it was obvious because we caught it right away, but next time it might not be so clear who the perpetrator is.
 
Back
Top