tool to log where usere are surfing to

Hi all,

As part of thighting our security policy's I want to be able to lock down some whebsites our company users are surfing to.
During office hours. Facebook.com and hotmail.com are site's none of our users need to access during office hours.
So I want to lock them down. But I want to see what other sites are being surfed to.
I don't need to know what user is surfing what site. Only need to know what sites.

how to block the sites? in ISA server or as I did it: I created a forward lookup dns record with nothing under it. So they get an error when the open facebook.com
what is the best way to block websites.
LVL 1
osa2Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Krzysztof PytkoSenior Active Directory EngineerCommented:
I would suggest some proxy software as ISA or squid. You can forbidden categories without knowing each web site domain name. You can also track in logs users activity. Proxy software is much more convenient in management than creating each dns zone and fake entries for websites.

Regards,
Krzysztof
osa2Author Commented:
I have Isa server running. however when I try to see the user activitie in the log sections. It display only 1 entry on a whole day. This is not how it should go.
How can I see the user activity log in ISA server?
Krzysztof PytkoSenior Active Directory EngineerCommented:
I'm not an expert in ISA but I found some information on EE Please check them, maybe it would be enough

3rd party tools or plug-ins to monitor Internet traffic

http://www.experts-exchange.com/Microsoft/Windows_Security/Q_23246075.html?sfQueryTermInfo=1+10+30+isa+monitor+site+user+web

http://www.experts-exchange.com/Microsoft/Windows_Security/Q_22633710.html?sfQueryTermInfo=1+10+30+isa+monitor+site+user+web

and something free for use

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/SBS_Small_Business_Server/Q_23023345.html?sfQueryTermInfo=1+10+30+isa+monitor+site+user+web

as I told you. I'm not expert and I don't use these programs. So, please wait for other experts from this field for more accurate information

Krzysztof
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

Gavincr001Commented:
get GFI software for your ISA
newmanmeNetwork Administrator\EngineerCommented:
Good morning,

I too use ISA, v2006.  We have had great succes with Burstek and it couldn't be easier to use.  Not to mention it is less expensive the GFI and the rest.  And they make a version specifically for ISA server.  Here is the website and our contact there.

 Take a minute and check them out.  Tell Laura that her customer contact from Raven Transport directed you to them.  We are switching from ISA to NG3000 firewalls next month and won't be using burstek in the future so I am glad to pass some business their way if you like the product.  They have been a really good company to work with  .Metion Raven, she might give you a discount if you like the product.

Laura Oberle <laurao@burstek.com>
http://www.burstek.com/

HAPPY NEW YEAR EVERYONE !!!!!!!!!!!!!!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
simonlimonCommented:
Do you require authentication on your ISA proxy? If not then you will not see where the user was surfing. You can only get the source IP.

However if you will use authentication, this will work seamlessly only with IE, other browsers will require to enter separately credentials.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Analysis

From novice to tech pro — start learning today.