How to bypass Kerio Control on LAN?

Question

Kerio

Kerio Control is installed on the local network, through which access to sites is distributed for each IP computer and page visits are monitored. How to get around it so that the History of visiting sites is not displayed in Kerio? Set up a VPN? How or where is it better to set it up? Or are there other easy options?

Answer 1

And let me write not as if you want something that does not fit into your employment contract, but as if you are the administrator of this very Kerio and they want to bypass you =)
<paranoia_mod> Allow
only HTTP + HTTPS
Enable transparent and non-transparent proxy + Forced NTLM Authentication + Binding to Domain
In fact, it's even better to set up a proxy on SQUID, make it a parent and additionally pass traffic through it and its ACL and filtering rules.
We make an autologin script, plus with group policies we tune browsers to use NTLM
We raise our CA and generate certificates for HTTPS authorization through a web form
We turn on traffic statistics and store it We
block DNS requests somewhere other than your server
We block VPN and proxy access
We turn on protection against MAC spoofing (plus we block all objectionable ones by mac, more precisely, we unblock only known macs)
We hang a web inspector and an access scheduler for each suitable rule (for example, after 8 we close the club)
We create QoS rules and P2P blocking
Turn on (break) the web filter and block access to Porn, Drugs, Job Search, VPN servers, Anonymous proxies and a lot more
Turn on the antivirus and block downloading zip, rar, exe and a lot more
Turn on password guessing protection and block such users
We make an exclusive rule for ourselves. We turn on the contra, put the fresh distribution kit of Fedor in the torrent for downloading porn .
***
How to get around this? Connect via HTTPS VPN or maybe find something like HTTP Tor Browser. Or already break the network, not the firewall.
***
How to bypass your Kerio?
Download a light java proxy from toonel.net or work in Turbo mode in Opera or Ya.Kakby.Browser.

Answer 2

))) there can be one thing but vpn is closed from the local network, the second, even if it is opened, there will be a noticeably anomalous connection and a large amount of traffic, which can alert and ban the ip vpn server or the vpn protocol