RE: Web logging

["Dante Mercurio" <Dante () webcti com>]

SurfControl Web Filter:
http://www.surfcontrol.com/products/web/

SurfControl can be installed in a pass by mode that will allow it to see
all traffic as it flows by the system. No client configuration
necessary. All you would need to do is put a hub between your trusted
side and your firewall port or in a switched environment, mirror the
port the firewall is on. I believe there is a 30 day trial and you can
have it just monitor if you wish.

M. Dante Mercurio, CISSP, CWNA, Security+
Consulting Group Manager


-----Original Message-----
From: Stephane Auger [mailto:stephaneauger () pre2post com] 
Sent: Friday, November 12, 2004 6:36 AM
To: security-basics () securityfocus com
Subject: Web logging


Hi everyone,

  one of my customers have requested a way to log the web sites that a
few employees go to, for an employee review.  They don't want to "spy"
the client computers, more like installing a sniffer on the network just
for them.  Now, I know all about Snort, but I don't think this kind of
tool would do the job.  Would anyone know of some kind of "invisible"
proxy that would just help me log all HTTP/FTP requests?  Also, the tool
musn't slow down the network considerably, since I've seen that happen
before with a few different apps.  And I'm open to solutions under
Windows, Linux and BSD.  Thanks!
 

Stephane Auger