I would use a proxy server inside my firewall that was aware of my users and
user groups (i.e. if all of your users exist in NT, I would suggest CSM
Proxy Server... for Novell, you may choose something like border manager).
This would allow you to specify usage on a per group/user basis (even
different policies for different groups, i.e. network security is unlimited,
but the average user is screened). You can also specify which protocols
groups have access to (i.e. a "mail" group).
-----Original Message-----
From: Leitch, Peter <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Wednesday, January 12, 2000 4:33 AM
Subject: Blocking an individual's access to the Internet
>Hi, all. I've been lurking on the list for a while, and it's time to
>decloak.
>
>My question is the inverse of the content filtering issues. My organisation
>doesn't necessarily want to block everyone from accessing any internet
site,
>becuase this carries with it a large administrative overhead. Porn sites
>move, get new IP addresses, there are new sites containing inappropriate
>material opening all the time and so on.
>
>Instead, we want to educate our users, have an Internet Usage Policy, and a
>procedure whereby individuals who breach those guidelines receive
>counselling. We also want to institute a method of preventing those
>individuals from accessing the Internet, but retain the ability to send and
>receive Internet e-mail and access the organisation's Intranet.
>
>Anyone have any ideas on how we might accommplish this?
>
>Cheers
>
>Peter Leitch <[EMAIL PROTECTED]>
>Project Coordinator, Security & ADE
>IMU-DVA
>Phone: (02) 6289 1179 Mobile: 0412 818 825
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
