Solved

Whats the best way to block access to specific sites?

Posted on 2010-08-25
1
337 Views
Last Modified: 2016-09-30
I work in an environment where we have public access to our information.  This information can be viewed and researched any time for free.  However paper and digital copies of the information to be taken away must be paid for.  Recently the honor system seems to have fallen down as some researchers have been emailing themselves gigabytes of data from our research computers.

Time to restrict access.

Points to note:  I don't control the DNS; the OU that these computers reside in is the ONLY one that should be restricted; there are legitimate reasons to be accessing the internet from our research computers, so we just want to block access to web mail; the solution needs to work for both IE and Firefox, on a mixture of Vista and Win 7 computers.

So far in my research, the hosts file seems to be the 'best' solution, but it's clunky, inflexible and wont accept wild cards.
0
Comment
Question by:Williams Co IT Dept
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
Williams Co IT Dept earned 0 total points
ID: 33533528
OK IPSec seems to have resolved the issue!!

A Group Policy Object able to be applied to a single OU, using existing infrastructure, blocking all secure connections on port 443.  This will block some possibly legitimate uses of the internet on those machines, but they will be few and there are other options for the public if they need that.

GPO
Computer Configuration>
Policies>
Windows Settings>
Security Settings>
IP Security Policies>
Created a new IP Security Policy, followed Wizard and added rules for LAN connections that connect through TCP and UDP to port 443.
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There is a lot to be said for protecting yourself and your accounts with 2 factor authentication.  I found to my own chagrin, that there is a big downside as well.
Let's recap what we learned from yesterday's Skyport Systems webinar.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Suggested Courses
Course of the Month3 days, 19 hours left to enroll

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question