You could edit the routing tables to prevent them surfing by IP address, taking care not to break access to the three sites you allow.
Regards, andrew On 10 March 2010 23:22, Thomas Mullins <[email protected]> wrote: > I was shopping around for another prong, > > > > I can use the ASA to lock them down in their main office, no problems > there. The smaller offices I am unsure of. > > > > Shane > > > > > ------------------------------ > > *From:* Andrew Levicki [mailto:[email protected]] > *Sent:* Wednesday, March 10, 2010 7:50 AM > > *To:* NT System Admin Issues > *Subject:* Re: restrict internet access to three websites > > > > Hi Thomas / Shane, > > > > Sorry if I've missed something, but creating entries in the hosts file > alone isn't going to restrict these PCs to just these three websites. Is > there another prong to your attack, so to speak? > > > > Thanks, > > > > Andrew > > On 10 March 2010 07:13, Thomas Mullins <[email protected]> wrote: > > Hello all, > > > > I have a customer that wants to restrict internet access to only three > websites. The machines have Vista Home edition on them. One of the > websites is an https site, so we cannot use the built in Parental Controls > settings. > > > > The main office has a Cisco ASA 5505, so no problem there. I will just > give the machine a static IP address, and use the ASA to restrict that IP to > only the three approved websites. However, the other sites do not have an > ASA. I am not sure what router they have (and will not know until I go > onsite), but I am sure it is a low end unit. I was thinking of using a > hosts file to resolve DNS names to actual internet addresses. > > > > Any better ideas? > > > > Thanks > > Shane > > > > > > > > > > > -- > Kind regards, > > Andrew Levicki MCITP MCSE CCNA > [email protected] > www.andrewlevicki.eu > > > > > > > > > > -- Kind regards, Andrew Levicki MCITP MCSE CCNA [email protected] www.andrewlevicki.eu ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
