For fun, a workmate of mine mirrored the wan port on our main switch and ran a little program called driftnet on his linux box that showed all the images being accessed over port 80.
http://www.ex-parrot.com/~chris/driftnet/ The program was originally intended to sniff all the traffic on wireless, but mirroring the wan port did give a simular result. The images that the program produced was quite enlightening to us about the basic browsing habits of our district. It was mostly pictures of shoes and Scarface. --Matt Ross Ephrata School District ----- Original Message ----- From: Paul Everett [mailto:[email protected]] To: NT System Admin Issues [mailto:[email protected]] Sent: Tue, 02 Nov 2010 10:20:25 -0700 Subject: RE: Firewall > I was thinking more along the lines of a real time gui vs logging. > > > > From: Jeff Brown [mailto:[email protected]] > Sent: Tuesday, November 02, 2010 11:43 AM > To: NT System Admin Issues > Subject: Re: Firewall > > > > We have fortinet firewalls with a fortianalyzer that I believe is > capable of all that, but I am happy to say I am too damn busy to > configure all that logging, let alone monitor anyone on that level. > > On Tue, Nov 2, 2010 at 10:29 AM, Paul Everett > <[email protected]> wrote: > > I am looking to replace our WatchGuard Firebox 700. > > Will some of the newer firewalls give me user level control. I'd like > to be able to add users to different groups and to see what each user is > doing on the Internet. Not just what protocol/port they are using, but > actual website they are visiting. I'd also like to send them messages > and be able to disconnect them. Icing would be able to see how much > bandwidth each is using. > > I'd like to stay with WatchGuard, but am open to other suggestions. > > > > Thanks, > > Paul > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
