Prevent users to access some websites

TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
I have some users who are watching videos all the time from internet. They do radio broadcasting, go to youtube. Can you provide an easy way to block these users to those websites with a central managment. I don't want to go to all the machines to block those websites. When they watch videos from internet, they use almost the bandwith and the provider slow down the signal for a certain period of time, so my internet is always slow. I am thinking to install a proxy server but do you have a solution for that.
MCP 70-270 / 70-290

Comments

  • ladiesman217ladiesman217 Member Posts: 416
    websense :)
    No Sacrifice, No Victory.
  • the_erickeethe_erickee Member Posts: 74 ■■□□□□□□□□
    websense :)
    It works great. We use it up here.
    Erick Marshall - @erickbm

    MCSE,MCITP x2,vExpert 2015,VCAP,VCP5 x2,MCSA x2,MCTS x3,MCP x2,UCP,Network+,A+
  • undomielundomiel Member Posts: 2,818
    You could use Dan's Guardian with a squid proxy server.

    http://dansguardian.org/
    Jumping on the IT blogging band wagon -- http://www.jefferyland.com/
  • DiminutiveDiminutive Member Posts: 102 ■■■□□□□□□□
    You could add an entry to DNS directing them to a work productivity site.

    1bf303bf8760dfa32b481492b9ccf422.jpg
    WIP: Win2008 MCITP Upgrade
  • ronpasa69ronpasa69 Member Posts: 40 ■■□□□□□□□□
    Diminutive wrote:
    You could add an entry to DNS directing them to a work productivity site.

    1bf303bf8760dfa32b481492b9ccf422.jpg

    hehehe, I like this suggestion the best. This would really trip them out. MAYBE THEN THEY WOULD GET THE MESSGAE. icon_bounce.gif
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)
  • bjaxxbjaxx Member Posts: 217
    astorrs wrote:
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)


    What type of firewall do you have? you probably have it built in and don't know it.
    "You have to hate to lose more than you love to win"
  • arwesarwes Member Posts: 633 ■■■□□□□□□□
    astorrs wrote:
    websense :)
    +1 especially now that they bought SurfControl, they totally own that market... :)

    Wow shows how long it's been since I kept up with that stuff. I didn't know that happened!

    We just use the proxy server that's built into the routers we use (MikroTik). It's really barebones stuff, but we've got most of the blogging & social networking sites blocked so it's doing what we want for right now.
    [size=-2]Started WGU - BS IT:NDM on 1/1/13, finished 12/31/14
    Working on: Waiting on the mailman to bring me a diploma
    What's left: Graduation![/size]
  • bwcartybwcarty Member Posts: 422 ■■■□□□□□□□
    Changing your DNS is quick, easy, free, and potentially fun, but it only works if you know where people are going. If you need more control and less hands on administration, look into Websense.
    Help eradicate blood cancers with a donation to the Leukemia & Lymphoma Society.
  • royalroyal Member Posts: 3,352 ■■■■□□□□□□
    +1 for Websense.
    “For success, attitude is equally as important as ability.” - Harry F. Banks
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?
    MCP 70-270 / 70-290
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    Tontonsam wrote:
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?
    I'm assuming you have less than 250 users, as such Websense Express would be your best bet.

    http://www.websense.com/docs/datasheets/en/Websense_Express.pdf
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Í prefer this by Websense Enterprise. But I am not involved in DNS yet and I am very excited to book my 70-290 exam to study the 291 that look in DNS. But, if I want to resolve this problem with DNS entry, how can I do that? I will try the Websense and will let u know the level of satisfaction.
    MCP 70-270 / 70-290
  • sprkymrksprkymrk Member Posts: 4,884 ■■■□□□□□□□
    Tontonsam wrote:
    But, if I want to resolve this problem with DNS entry, how can I do that?

    Simply create an A record on your DNS server for whatever site you want to restrict, then put in a bogus address like 0.0.0.0 or the address of your company home page.
    All things are possible, only believe.
  • ladiesman217ladiesman217 Member Posts: 416
    Tontonsam wrote:
    Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?

    I found this one.

    http://www.websense.com/docs/support/documentation/setup/v61/WebsenseDeploymentGuide.pdf
    No Sacrifice, No Victory.
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    Websense is very awesome even though I see today it s not very working. When I click to server\download, it says payment overdue. But it is a very good software. Anyway, I tried to block yahoo.com in the dns level. In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0. But it s not working. Can you explicitly provide the steps for blocking yahoo site for example.
    MCP 70-270 / 70-290
  • meadITmeadIT Member Posts: 581 ■■■■□□□□□□
    You would also have to clear your local cache by running
    ipconfig /flushdns
    

    When you type in yahoo.com, your pc will look in your local cache first. If it's not in there, then it will query your DNS server.
    CERTS: VCDX #110 / VCAP-DCA #500 (v5 & 4) / VCAP-DCD #10(v5 & 4) / VCP 5 & 4 / EMCISA / MCSE 2003 / MCTS: Vista / CCNA / CCENT / Security+ / Network+ / Project+ / CIW Database Design Specialist, Professional, Associate
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    This command doesn't resolve anything. Could you provide the steps, maybe I do something wrong?
    MCP 70-270 / 70-290
  • rbutturinirbutturini Member Posts: 123
    Websense is very good, and Cymphonix is also good, albeit pricey. You may even be able to get a version of websense that integrates with your firewall.
  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    Tontonsam wrote:
    In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0.
    You would want to create a new forward lookup zone for yahoo.com; putting it inside your existing one (say company.com) and creating the host record as you described would create a host called "yahoo.com.company.com".
  • TontonsamTontonsam Member Posts: 90 ■■□□□□□□□□
    It works but I'd like in the future to describe the steps cause I was thinking that I am a foolish guy. :D But I remark that I have to create a primary zone for all the sites I want to block, can I put them in a one container or one primary zone? Now, I am ok with the sites, how can now I block some messenger like ovoo, yahoo, skype with their ports?
    MCP 70-270 / 70-290
Sign In or Register to comment.