RE: monitoring remote access

["Graham, Randy" <RGraham () NCIINC com>]

I'm not sure how this would work based on what I think the original question
was.  Let's put specifics in an example to see what was asked.  So, for
example:

--------
My company is in Washington DC.  My company provides me with a national ISP
account and a VPN client for accessing the company network while on the
road.  I travel to California on business, take my laptop, and want to surf
for porn.  If I connect to the local ISP number and am not running the VPN
client and not connecting to the company network.  Can my company track my
porn surfing?
--------

I don't think there is a way to track this without ISP cooperation, but I
could be wrong.

Randy Graham

-----Original Message-----
From: Carric Dooley [mailto:carric () com2usa com]
Sent: Tuesday, November 09, 1999 11:01 PM
To: Daniel Djundjek
Cc: firewall-wizards () nfr net
Subject: Re: monitoring remote access


Well... yes.  I would use Radius to track the users activity (as far as
when they are online), some kind of http proxy to track their web site
profile(and it would use authentication, not just track by IP), and an
intrusion detection system to catch the hacking and other company
privilege abuse.

Easy..   =)


Carric Dooley CNE
COM2:Interactive Media
http://www.com2usa.com

"Luck is the residue of design." 
- Branch Rickey - former owner of the Brooklyn Dodger Baseball Team 

On Tue, 9 Nov 1999, Daniel Djundjek wrote:

> Dear all,
>
> A strange request was put to me....
>
> A company is setting up a number of dial up accounts via an isp for their
> employees able to work at home.  Now since they are dialing in via an isp
> and not directly in to the main office, the company would like to monitor
> the employees activity to ensure they are not doing anything
unsavoury(porn,
> hacking, abusing company privelidges).
>
> Does anyone know of any 3rd party tools which can send alerts to a central
> location for users on a dial up account.  The dynamic ip allocation would
be
> a problem but is there anything which can cope with this type of request??