Unauthorized Internet Access

[Anonymous]

I have my first case of internet misuse (pornography to be exact) on my
hands! The offender is not someone in my department but rather from a
different department (same company & building) committing the offense using
my group's equipment in our corner of the complex. Here are the issues...
I'm looking for technical suggestions to help us properly document the
current situation? What can we do to monitor the situation (on a windows 98
system) and automatically document the offenses until we determine the fate
of this individual? Any other suggestions from a CAD / IT standpoint? I've
already contacted the "Legal group" and I'm awaiting a response.

Thanks,
JL

[Anonymous]

If the offender is accessingthe internet through any sort of proxy server,
you can usually set the proxy server to be logging what everyone does. I
use an MS Proxy server, and could tell you what to do to set logging for it.
You would also want to get a log file interpretting program, but for a
single case of misuse/abuse, you could se a 30 day free trial version.

If they are goint straight to a router, or using a local modem, you could
just routinely copy their history files.

Beyond that, there are various monitoring programs that you can purchase and
install. But I have no esxperience with any of them.




"Jake" wrote in message
news:107EA3F58F41627723ED7CFA37F29300@in.WebX.maYIadrTaRb...
> I have my first case of internet misuse (pornography to be exact) on my
> hands! The offender is not someone in my department but rather from a
> different department (same company & building) committing the offense
using
> my group's equipment in our corner of the complex. Here are the issues...
> I'm looking for technical suggestions to help us properly document the
> current situation? What can we do to monitor the situation (on a windows
98
> system) and automatically document the offenses until we determine the
fate
> of this individual? Any other suggestions from a CAD / IT standpoint? I've
> already contacted the "Legal group" and I'm awaiting a response.
>
> Thanks,
> JL
>
>

[Anonymous]

CAUTION CAUTION CAUTION CAUTION CAUTION CAUTION CAUTION CAUTION

Has the company written, published and have filed copies of signed
acknowledgement of an internet policy ?
I caught someone doing this and just showed the page of his history as well
as the pages he viewed to management 😃 They took it from there.

drew

"Jake" wrote in message
news:107EA3F58F41627723ED7CFA37F29300@in.WebX.maYIadrTaRb...
> I have my first case of internet misuse (pornography to be exact) on my
> hands! The offender is not someone in my department but rather from a
> different department (same company & building) committing the offense
using
> my group's equipment in our corner of the complex. Here are the issues...
> I'm looking for technical suggestions to help us properly document the
> current situation? What can we do to monitor the situation (on a windows
98
> system) and automatically document the offenses until we determine the
fate
> of this individual? Any other suggestions from a CAD / IT standpoint? I've
> already contacted the "Legal group" and I'm awaiting a response.
>
> Thanks,
> JL
>
>

[Anonymous]

Jake,

You made the correct first step by talking to the lawyers. They can tell
you want you can and can't do to monitor the employee. I don't think that
you can specifically target one person with any sort of investigation, and I
think that you can only review the proxy or firewall logs of the whole
company for the purposes of network monitoring, not employee use. I think
that you can though pursue action against an employee if you found something
while monitoring normal network traffic. If you used the history on his
machine you have a problem. Work with legal and find what your policies and
the law allow.

As for the technical, if you have a proxy that is great, if you have a
firewall that will probably work too. I can set my firewall to log all
traffic in and out and send it to a log server. That would be acceptable
monitoring of network traffic.

Robert
"Jake" wrote in message
news:107EA3F58F41627723ED7CFA37F29300@in.WebX.maYIadrTaRb...
> I have my first case of internet misuse (pornography to be exact) on my
> hands! The offender is not someone in my department but rather from a
> different department (same company & building) committing the offense
using
> my group's equipment in our corner of the complex. Here are the issues...
> I'm looking for technical suggestions to help us properly document the
> current situation? What can we do to monitor the situation (on a windows
98
> system) and automatically document the offenses until we determine the
fate
> of this individual? Any other suggestions from a CAD / IT standpoint? I've
> already contacted the "Legal group" and I'm awaiting a response.
>
> Thanks,
> JL
>
>

[Anonymous]

The law in the US pretty much says that if you do it on a company machine, I
can look at it all I want. You have no privacy at work. Get used to it.

--
James Wedding
IT Manager
Jones & Boyd, Inc.
Dallas, TX
jwedding@*NOSPAM*jones-boyd.com

[Anonymous]

>The law in the US pretty much says that if you do it on a company machine, I
>can look at it all I want. You have no privacy at work. Get used to it.


What if it is on a laptop that belongs to YOU....but
you bring to work with you everyday and connect to the
network?

[Anonymous]

If you are connected to the network to gain internet access then you are using company facilities. They can monitor it.
If you are using a dial-up, then you are using their phone system. They can monitor it. (not voice, but data, I think)

If you are bringing the machine to work the company can be held responsible for any unlicensed software (or any "offensive"
materials) that appear on the machine. We don't allow the use of "home machines" in our office, as we have no idea what's on them.
--
jason martin
frankfurt-short-bruza

Member of the Autodesk Discussion Forum Moderator Program

wrote in message news:t8uj9u024d0olvc3ci9rilp1o3sjhrodu7@4ax.com...
> >The law in the US pretty much says that if you do it on a company machine, I
> >can look at it all I want. You have no privacy at work. Get used to it.
>
>
> What if it is on a laptop that belongs to YOU....but
> you bring to work with you everyday and connect to the
> network?

[Anonymous]

>If you are using a dial-up, then you are using their phone system. They can monitor it. (not voice, but data, I think)

Hmm... strange.

They can monitor your data on a dial up
connection.....but NOT any voice conversations?

I wonder how come?

[Anonymous]

Okay what proof do you have? What exactly has he/she done? Have you confronted this person and or his/her supervisor? Did someone report to you that this person had smut on their monitor? If so, is that your justification to go to the legal department? How do you know that they didn't just happened to click onto an innocuos looking link? If your asking for monitoring tools then are you looking for proof? Or are you just trying to confirm what you suspect?

As for as your technical issue. How are your computers connected to the internet? Via Web Proxy, router with NAT, direct connection?

Need more information.

I hope you aren't just stirring up a whole lotta trouble for nuttin.

The last time I had this problem I confronted the person discreetly and the problem went away. I didn't get legal, his supervisor, nor did I get HR involvement. Oh BTW , I had documented proof before I spoke to this person.

[Anonymous]

That would start to fall into the area of a wiretap right ?
You have to have a warrant or other stuff to listen in or use it in court.
Otherwise it isn't usable as evidence.

drew

wrote in message
news:b31k9us1jovl4mvn2i1ilnd5c5dojub2cm@4ax.com...
> >If you are using a dial-up, then you are using their phone system. They
can monitor it. (not voice, but data, I think)
>
> Hmm... strange.
>
> They can monitor your data on a dial up
> connection.....but NOT any voice conversations?
>
> I wonder how come?

[Anonymous]

A co-worker of my noticed some unusual websites in
his history pulldown and after looking at the local cookies, history, cache
files, etc, etc we noticed distinct patterns. This is not a one time occurance
or even two, three or four unintentional peeks at adult materials. Without a
doubt, this is a pattern. Some of the documented access occurred during a recent
company retreat that placed about 90% of the company in a convention center 300
miles away. All of the access occurred after 9:00p.m., which
also limits the list of people to very limited list of a couple.
Due to the extreme nature of some of the sites, it was necessary to
get legal involved. I need to know what the laws in my state allow me
to due for monitoring, documentation and how to protect the parties involved,
including the company as a whole, from any possible liability as a result of
simply taking the "do nothing" approach.

style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">

"jbrookes" <jan@brookes.com>
wrote in message
href="news:f0c832e.6@WebX.maYIadrTaRb">news:f0c832e.6@WebX.maYIadrTaRb...

Okay
what proof do you have? What exactly has he/she done? Have you confronted this
person and or his/her supervisor? Did someone report to you that this person
had smut on their monitor? If so, is that your justification to go to the
legal department? How do you know that they didn't just happened to click onto
an innocuos looking link? If your asking for monitoring tools then are you
looking for proof? Or are you just trying to confirm what you suspect?

As for as your technical issue. How are your computers connected to the
internet? Via Web Proxy, router with NAT, direct connection?

Need more information.

I hope you aren't just stirring up a whole lotta trouble for nuttin.

The last time I had this problem I confronted the person discreetly and the
problem went away. I didn't get legal, his supervisor, nor did I get HR
involvement. Oh BTW , I had documented proof before I spoke to this
person.

[Anonymous]

Jake

In our company, if you surf for porn, your fired,
they don't care who you are, how long you've been with the company at all. 
I've seen it happen.  Get it written in the personal practice handbook or
even send out a memo company wide saying it is not excepted, on or off company
time.

style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">

Jake <JakeL@home.net> wrote in
message
href="news:95BE9BD475FA8DA7E887B342EADCBBBA@in.WebX.maYIadrTaRb">news:95BE9BD475FA8DA7E887B342EAD......

A co-worker of my noticed some unusual websites
in his history pulldown and after looking at the local cookies, history,
cache files, etc, etc we noticed distinct patterns. This is not a one time
occurance or even two, three or four unintentional peeks at adult materials.
Without a doubt, this is a pattern. Some of the documented access occurred
during a recent company retreat that placed about 90% of the company in a
convention center 300 miles away. All of the access occurred after
9:00p.m., which also limits the list of people to very limited
list of a couple. Due to the extreme nature of some of the sites, it was
necessary to get legal involved. I need to know what the laws in my
state allow me to due for monitoring, documentation and how to protect the
parties involved, including the company as a whole, from any possible
liability as a result of simply taking the "do nothing" approach.

style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">

"jbrookes" <jan@brookes.com>
wrote in message
href="news:f0c832e.6@WebX.maYIadrTaRb">news:f0c832e.6@WebX.maYIadrTaRb...

Okay
what proof do you have? What exactly has he/she done? Have you confronted
this person and or his/her supervisor? Did someone report to you that this
person had smut on their monitor? If so, is that your justification to go to
the legal department? How do you know that they didn't just happened to
click onto an innocuos looking link? If your asking for monitoring tools
then are you looking for proof? Or are you just trying to confirm what you
suspect?

As for as your technical issue. How are your computers connected to the
internet? Via Web Proxy, router with NAT, direct connection?

Need more information.

I hope you aren't just stirring up a whole lotta trouble for nuttin.

The last time I had this problem I confronted the person discreetly and
the problem went away. I didn't get legal, his supervisor, nor did I get HR
involvement. Oh BTW , I had documented proof before I spoke to this
person.