Re: Internet access control queston?

Tech-Archive recommends: Fix windows errors by optimizing your registry



Well, more and more programs are being used that require Internet access,
for instance at my customer site he has three locations, at all three they
do data entry to a sql database at home office with a package that is really
just a collection of asp pages on a web site on a server at the home office.
The company that sold them the package told them it was a great thing
because they could access just one copy of the program from anywhere in any
of their locations, including working from home! No concerns at all about
security would you believe!
Anyways, I think that giving Internet access is often a real requirement. I
know that at this site it is. They are a car dealership and the manufacturer
requires them to use a web site for some things with respect to sales.

Thanks Phillip
Bob

"Phillip Windell" <@.> wrote in message
news:uBAvkwWwGHA.3996@xxxxxxxxxxxxxxxxxxxxxxx
"Bob" <bdufour@xxxxxxxxxx> wrote in message
news:uadAjMVwGHA.1808@xxxxxxxxxxxxxxxxxxxxxxx
Good idea but unfortunately not so easy in reality.

Unfortuneately it *is* the reality.
IMO - It is often a mistake to even give employees internet access to
start with. Many jobs don't *really* require it. There is a difference
between wanting it and needing it. Employees that use SMTP EMail with an
outside mail server can have the email without having web access,...you
just give them permssion to use SMTP and POP3, but not HTTP & HTTPS.

Computers are not babysitters. If a company's management cannot control
the behavior of their own employees, a computer sure isn't going to do
it,...and in such cases the company will usually "fold".
There is no such product that is going to do exactly what you are asking.
Some can come close,..but be prepared to spend some $$$$.
A product like MS ISA Server will come close.
MS ISA Server combined with filtering products like SurfControl will come
even closer,...but products like SurfControl interferre with some of the
ISA's functionality. It is an imperfect world.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx
-----------------------------------------------------





.



Relevant Pages

  • RE: ISA 2004 - Internet Access without using Firewall Client
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... ISA 2004 - Internet Access without using Firewall Client ... ISA server on SBS only allows domain user access Internet. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 - Internet Access without using Firewall Client
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... ISA 2004 - Internet Access without using Firewall Client ... ISA server on SBS only allows domain user access Internet. ...
    (microsoft.public.windows.server.sbs)
  • RE: Looking for a specific ISA 2004 Article
    ... article to configure your internet access for different users. ... Controlling Secure Internet Access Using ISA Server 2004 ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: username not showing in ISA log
    ... A 407 response is given "Proxy Authentication Required" ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ... Allow Internet Access Allow Rule ...
    (microsoft.public.isaserver)
  • Multiple NICS issue
    ... PPPoE router for internet access is becuase my primary network uses ... Microsoft ISA server and I can't authenticate to it through Linux. ... UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 ...
    (comp.os.linux.networking)