RE: GPO that forces users to use a proxy server.

From: Bryan S. Sampsel (bsampsel_at_libertyactivist.org)
Date: 10/29/04

  • Next message: Jim Harrison (ISA): "RE: GPO that forces users to use a proxy server." 
    Date: Fri, 29 Oct 2004 13:49:20 -0600 (MDT)
To: focus-ms@securityfocus.com

    A layer 4 switch transparently redirecting the web traffic at your job
    through your web proxy is not only manageable, but keeps you from having
    to hardwire your browswer or force VPN connections to your corporate LAN,
    only to redirect to the Internet. Much more efficient use of resources.

    There are several switches like this on the market...Alteon, Foundry, and
    I believe Cisco makes one.

    Sincerely,

    Bryan S. Sampsel
    LibertyActivist.org

    Steven Hay said:
    > We use a VPN for this as well. Our VPN client is pretty good as it
    > terminates all other network access once a VPN connection is established
    > (disabling the possibility of a remote controller trying to 'zombie' VPN
    > into our system). With this the advantage is that there is no other
    > LAN/Internet access available to the laptop except through the VPN. As
    > well
    > we know where users are surfing with our business assets (laptops).
    >
    > The disadvantage is a web page is now loading to our network, then
    > transferring to the user which can make web browsing slower if the page
    > isn't already cached. As well some users share out their home printers to
    > their laptops and the VPN won't allow any access to this for them to print
    > locally. But we consider these the lesser of the two evils.
    >
    > Steve
    >
    > -----Original Message-----
    > From: Michael Silk [mailto:michaels@phg.com.au]
    > Sent: October 28, 2004 5:52 PM
    > To: Ryan Parrish; focus-ms@securityfocus.com
    > Subject: RE: GPO that forces users to use a proxy server.
    >
    >
    > Hi,
    >
    > If you could; how would you ensure the time on there computer was
    > valid ? You could setup a timeserver and force their computer to use that
    > through GPO (I assume) but that means the time server would need to be
    > available outside your intranet ... Surely it would be easier to allow the
    > proxy server to be contactable from their home (even via a VPN of some
    > sort
    > ... ?) because after all, it's a work computer and surely the same rules
    > apply for what they can browse on it no matter where they are or what time
    > it is.
    >
    > -- Michael
    >
    >
    > -----Original Message-----
    > From: Ryan Parrish [mailto:RyanP@foxracing.com]
    > Sent: Friday, 29 October 2004 5:28 AM
    > To: focus-ms@securityfocus.com
    > Subject: GPO that forces users to use a proxy server.
    >
    > We are trying to implement a GPO that forces all users/computers to use a
    > proxy sever for there internet access in the company, but have hit a snag.
    > We have lots of laptop users that we found during testing when they take
    > there laptops home they can access the internet using there own ISP since
    > we
    > set the policy to use a proxy server that is not available to the outside
    > internet, thus they get no internet access. Has anybody dealt with this
    > kind
    > of situation before? Is there a way to set a GPO to only be active during
    > business hours?
    >
    >
    > _-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_
    >
    > Ryan Parrish
    > ryanp@foxracing.com
    > IT Dept.
    > 408-776-8633 extension 1229
    > Please direct all support questions to - (¯`·.¸¸.->
    > itsupport@foxracing.com
    >
    > _-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    >
    >
    >
    >
    > **********************************************************************
    > This email message and accompanying data may contain information that is
    > confidential and/or subject to legal privilege. If you are not the
    > intended
    > recipient, you are notified that any use, dissemination, distribution or
    > copying of this message or data is prohibited. If you have received this
    > email message in error, please notify us immediately and erase all copies
    > of
    > this message and attachments.
    >
    > This email is for your convenience only, you should not rely on any
    > information contained herein for contractual or legal purposes. You should
    > only rely on information and/or instructions in writing and on company
    > letterhead signed by authorised persons.
    > **********************************************************************
    >
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    > Please note that Internet email is not always private, secure or reliable.
    > The sender accepts no liability for any damages caused by any virus
    > inadvertently transmitted with this email. Any opinion expressed in this
    > email is solely that of the author, unless clearly indicated otherwise.
    > This email, and any attachments, may contain confidential and/or
    > proprietary
    > information that is intended only for use by the addressee. If you are
    > not
    > the intended recipient, any use, dissemination, forwarding, printing, or
    > copying of this email is strictly prohibited. If you received this email
    > in
    > error, please delete the email and advise the sender of the delivery
    > error.
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jim Harrison (ISA): "RE: GPO that forces users to use a proxy server."

    Relevant Pages

    • RE: restricting mobile users internet access
      ... You said you had your proxy setup as a transparent proxy, ... Connect to VPN ... restricting mobile users internet access ... access the ISPs site to activate the your internet access account. ...
      (Security-Basics)
    • Pocket PC 2003 (SE) connection setting to access internet through
      ... to be accessed through a proxy. ... I set up a VPN server to access the internal network from "Internet" through ... PPC I can access the server application directly (proxy is not used in this ...
      (microsoft.public.pocketpc)
    • Re: Proxy & VPN
      ... > Users are not allowed to leave the corporate network for internet traffic ... > without using the proxy, ... > VPN connections outside. ...
      (microsoft.public.windowsxp.security_admin)
    • Pocket PC 2003 (SE) connection setting to access internet through
      ... to be accessed through a proxy. ... I set up a VPN server to access the internal network from "Internet" through ... PPC I can access the server application directly (proxy is not used in this ...
      (microsoft.public.pocketpc.wireless)
    • Notebook im Unternehmen
      ... Internet und dann über VPN auf unsere Terminalserver gehen. ... Die Laptops sind auf dem aktuellen Patch und Virensignaturstand ... Welche Möglichkeiten gibt es die "zurückkommenden" Rechner ...
      (microsoft.public.de.security.netzwerk.sicherheit)
    Loading