If they are restriced users, remove iexplore.exe from the list of allowed programs. If they are domain admins, you can remove the default gateway and give static address. The best way in my opinion is to use a web filter like surf control. If you are using ISA-Server for a proxy, you can configure a rule by ip address. In a NATed environment, you may need to be more creative.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shawn Connelly Sent: Thursday, August 05, 2004 2:42 PM To: Exchange Discussions Subject: RE: blocking internet Huh? I don't believe anyone had claimed that Surf control is a firewall. It is, however, a great addition to ones corporate security AFTER the firewall. I was making a comparison to changing security restrictions on my Pix vs using Surf Control to affect the same restrictions. Say, has anyone taken a look at TrendMicro Interscan Web Security Suite (http://www.trendmicro.com/en/products/gateway/iwss/evaluate/overview.htm)? This product appears to do a whole lot of stuff that I wish Surf control could do. For example, they claim that Interscan can detect viruses, worms, spyware, hijacking, and such. These detections are currently not possible with Surf control. I may switch products (I'm still in my evaluation period with Surf control). Any thoughts? (yeah, I know this is probably off-topic) Shawn -----Original Message----- From: Mellott, Bill [mailto:[EMAIL PROTECTED] Sent: Thursday, August 05, 2004 9:16 AM To: Exchange Discussions Subject: [SUSPECTED SPAM (Bay) - ] - RE: blocking internet - Bayesian Filter detected spam I do not think Surfcontrol is a "Firewall" Or I should say at least their URL product I run It can either be stand alone..net sniffer type OR be put on Proxy-firewall (ISA..etc).. But I do not believe it is a "firewall" product like a PIX, Checkpoint..etc... This said it work pretty nicely of me as URL control and other etc... And I like kicking my pix when I have too...which is like never it just run's.... bill -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shawn Connelly Sent: Wednesday, August 04, 2004 7:59 PM To: Exchange Discussions Subject: RE: blocking internet It was an easy sale for me when I released that I no longer needed to spend time connecting to the pix and typing cryptic commands to get it to do the same thing that Surf Control can do with a few clicks of the mouse. To think, I was once a true UNIX CLI nerd who hated any type of GUI interface. What killed that part of me was the loss of time to do anything else but getting the job done as quickly as possible. Sigh... The GUI saved me and now I embrace it. :-) Shawn -----Original Message----- From: Gordon Olson [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 7:54 PM To: Exchange Discussions Subject: RE: blocking internet We use it, works great. You can also set it up so to allow somone to access the internet, for example 30 minutes per day. I like that option. I still use a old fashion way as well, change the permissions on IE. -----Original Message----- From: Shawn Connelly [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 4:45 PM To: Exchange Discussions Subject: RE: blocking internet Hello Tony, Group members have suggested a variety of ways such as blocking directly at the firewall and removing the default gateway information (at the DHCP server). These will definitely work; however, these methods don't allow you much control and zero monitoring capability. Another method you may want to consider is purchasing Internet monitoring/blocking program like Surf Control (http://www.surfcontrol.com/products/web/). Surf Control will allow you to selectively block some/all internet access based on client name, IP address, etc. This software offers many other benefits as well. It's worth looking at if you have about $2K in your budget. Shawn -----Original Message----- From: Tony Nguyen [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 3:30 PM To: Exchange Discussions Subject: blocking internet Does anyone know of a way to block internet usage? Like blocking them from using the internet. I had some problem with e-mail problem and had to call SSP for some help. They had to set the DNS server forwarders ip address and now everyone have access to the internet. Is there a way to restrict some computer from accessing the internet. Tony ======================================================================== This email was scanned and certified as free from any known malicious data. However, any attached files opened by you is done so at your own risk! The information contained in this message is intended only for the personal and confidential use of the designated recipients named herein. As of May 25, 2004, if this disclaimer is not included, then this email did not originate from Dipix Technologies Inc. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
