User internet tracking

Hi all,

I have been asked to provide a solution to track users internet usage and block some websites.

My first thought was a proxy "device", I could lock down the machines via GPO point them to the proxy and then have a bit of software reporting on all usage.

I have the ability to either go for a device that would do this or I could spin up a VM to house the software.

Would anyone be able to recommend something that I could use?

Thanks in advance
Billy BensonIT TechAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Olivier MARCHETTACitrix Support and Infrastructure EngineerCommented:
I recommend pfSense for that usage.
It can work as a transparent proxy too.
ITSysTechSenior Systems AdministratorCommented:
Another one that we did a lot of research before buying was Forcepoint WebShield it has connections to GPO and allows the administrator to view user usage and websites visited with out hindering the bandwidth. We have and a lot of supervisors come to us asking to show an employee's history and how much they use a certain site. There are also appliance solutions through Cisco that can be integrated with current firewalls or purchased as standalone devices.
Bryant SchaperCommented:
What are you using as your edge firewall, typically they have some abilities as well.  I personally vote for a hardware solution over software, we use a mix of both, but tend to only restrict sites/categories at the endpoints, then the firewalls monitor and report all traffic.
Billy BensonIT TechAuthor Commented:
Thanks all, my customer's gateway is a Draytek 2860 so nothing too amazing. I like the idea of an appliance but its finding the right one
Michael MachieIT SupervisorCommented:
The FortiGate 100E is a very affordable option to do what you need. I rolled one out for a customer just a few weeks ago to address the exact same concerns. They immediately saw over-utilization of ISP bandwidth was caused by the Dropbox sync client. We created a traffic shaping policy to limit it to 3mb shared bandwidth max and all issues went away.

FortiNet Firewalls

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.