Employee monitoring software

[SteveLord]

Was wondering if anyone in IT had any insight on computer monitoring software? The ability to blacklist websites is an obvious necessity. Seems like there is a ton of products out there, but am interested in anyone that personally manages anything they use at their workplace and would recommend.

 

[SMOKEU]

Many of them can be bypassed with proxy servers, keep that in mind.

 

[TollhouseFrank]

Many of them can be bypassed with proxy servers, keep that in mind.

when you block the ability to meddle with proxy server settings, that isn't an issue.


Anyway, to the OP, what level of monitoring are you looking for? Just general reports on software used/websites visited? Are you looking to do account lockdowns and only allow certain software/web access?

 

[dropadrop]

Maybe you are looking for something like untangle?

 

[dark_15]

Zscaler would be my #1 choice - it's done in a cloud-filtering scenario where web traffic is forwarded at the firewall/router level to a filtering node. They have the best filtering solution out there IMO. I've also worked with Websense, SurfControl, and Bluecoat in previous years but Zscaler blows them out of the water.

*Slight Disclaimer - I work for a company that resells security services, including Zscaler. I do not work for Zscaler directly.*

 

[SteveLord]

when you block the ability to meddle with proxy server settings, that isn't an issue.


Anyway, to the OP, what level of monitoring are you looking for? Just general reports on software used/websites visited? Are you looking to do account lockdowns and only allow certain software/web access?

That sounds useful. For the record, I don't *believe* there "issues" going on right now. Maybe some Facebook or Craigslist usage here and there. But I'd like to be equipped should the need suddenly arise. Otherwise, right now only existing issue is a few people that installed fake antivirus software.

This is for about 25 users too...if that helps.

These look like what I am interested in.

http://www.workexaminer.com/

http://www.softactivity.com/employee-monitoring.asp

http://www.staffcop.com/

 

[EarthDog]

Websense. Though its enterprise in scope (and oppressive).

 

[gangaskan]

That sounds useful. For the record, I don't *believe* there "issues" going on right now. Maybe some Facebook or Craigslist usage here and there. But I'd like to be equipped should the need suddenly arise. Otherwise, right now only existing issue is a few people that installed fake antivirus software.

This is for about 25 users too...if that helps.

These look like what I am interested in.

http://www.workexaminer.com/

http://www.softactivity.com/employee-monitoring.asp

http://www.staffcop.com/

untangle might be a good starting point, start messing aroud with those things too!


also, i would say SQUID with DANS GUARDIAN would work as well. you can block all, none, or some. its up to you.


edit: Squid and dans also have great logging capabilites

 

[grumperfish]

untangle might be a good starting point, start messing aroud with those things too!


also, i would say SQUID with DANS GUARDIAN would work as well. you can block all, none, or some. its up to you.

Have heard good things about untangle, although I haven't tried it out yet personally.

Smoothwall also has a squid proxy built in by default, along with pretty robust QoS settings, and you can install Dansguardian as an addon with blacklisting and autofiltering by protocol, MIME-type, etc.


Both of these sell corporate appliances/licenses if you're looking for 24/7 support.

 

[Mr.Guvernment]

untangle box with the web filter package = everything blocked, proxies and all and can also block https attempts.

 

[TC]

Another vote for Untangle. We use it for our managed security service. We have replaced a number of other products like sonicwall and cisco with untangle and the reception has been positive in every case.

 

[SteveLord]

*snip*Blacklisting some websites won't help you bro. Some websites are helpful these days in the business just like social networking sites.

If their ad banners carry embedded malware...then I will at least temporarily. We've had this happen to a local news station AND the newspaper. While some agencies around here block Facebook , I don't have any plans to yet.

 

[Mr.Guvernment]

blacklisting sites work fine, any company should know what their employees need and do not need. This is why most companies have varying levels of access based on roles and departments.

Also with Untangle, you can block facebook, but then allow access to specific profiles.

Ror example out support and security teams are very limited for access, where as our marketing team has more freedom due to their job nature, while Affiliates is semi limited and GFX web design guys are also limited to a degree and really only have access to tools and sites related to their job.

Also better to block something and then open it, than leave everything wide open and risk a network infection.

I cant count how many times we had our web guys download some cool new tool to do something that ended up being infected from a bad site.

 

[miniklop]

may be worth a try software monitor?
like this: actymac.com/dutywatch or dutywatch remote (can sent report to your computer). Very easy and powerful program.
hope help you.

 

[RJARRRPCGP]

Websense. Though its enterprise in scope (and oppressive).

Tell me about it! Crotched Mountain had that in 2002 and it falsely flagged some web sites as "sex".

 

[markp1989]

might be worth looking at Astaro.

http://www.astaro.com/products/astaro-security-gateway-software-appliance

I use it at home as the router I was given could only handle ~150 connections.

I have used it to block adverts from most known ad servers, from this list http://pgl.yoyo.org/adservers/serverlist.php?showintro=0;hostformat=hosts

Its WAY overkill for what I need, but its solid.

 

[Mr.Guvernment]

i think this day in agem, you dont "monitor" an employee, what you need to do is "enforce" company policies.

from there you block content not allowed on the firewall side, and from there you review the logs and see who has tried to do what and then deal with HR from there.


if there is no HR, then you as the IT need to learn to deal with people and inform them of their excessive or above normal attempted use of resources that do not involve work.

 

[wa77ss]

i have set up websense before for about 200 users and had to remove it because it was too oppressive, incorporated into win2k3 domain. they have levels and stuff that you can block but I guess the agriculture pages get a lot of false flags lol

 

[Anelly]

i think you need an internet filter rather then an employee monitoring software.
check this company, it provides both: http://www.cyclope-series.com

 

[krad]

Was wondering if anyone in IT had any insight on computer monitoring software? The ability to blacklist websites is an obvious necessity. Seems like there is a ton of products out there, but am interested in anyone that personally manages anything they use at their workplace and would recommend.

Why blacklist website where you can monitor it.
It is also a good exercise for the employee for their sanity at work.
The only this is employee must be smart enough to use its resources at their workplace also they should not use unnecessary website that is not related to work. Employee must be aware that their are been track so that if they do suspicious things they will be easily cough.

Their are so many monitoring software available in the internet, maybe this article might help you decide.