Internet access restriction

K

Kirill Sirenko2011-01-17 00:30:48

Windows

Kirill Sirenko, 2011-01-17 00:30:48

The situation is as follows: a local network of an enterprise of 7 PCs, 1 server as a file storage and a 1C server. Management requirement: to close access to sites in general on 2 PCs, while other programs (accounting and mail) should remain in service.
Question: What is the best way to do it? Put something on the server? It makes no sense, I think, because it is not a gateway to the Internet. And if you put it on 2 PCs locally, then what? And preferably from freeware.
The OS is Windows 7 by the way.

Reply

Answer the question

In order to leave comments, you need to log in

9 answer(s)

V

VenomBlood, 2011-01-17
@VenomBlood

Can't you just put a ban on the launch of browsers?

K

Kirill Sirenko, 2011-01-17
@Chieftec

In principle, the idea, but how best to put it? Demolish all browsers and remove the ability to install programs?

A

allexx, 2011-01-17
@allexx

I would advise you to apply traffic blocking policies exactly on the server (do you still have the Internet distributed centrally?), and, of course, policies on computers, because the goal is to close named services, no matter how they can be additionally organized (3G modems, yota .. .)

V

volanddt, 2011-01-19
@volanddt

If it’s a Windows server, then try to put a light proxy on the server, for example, 3proxy, and let it into the network only through it, and on two locked cars, specify the traffic size equal to 0 in the proxy. If you need access from locked cars to local port 80, then simply specify exceptions. And quickly, and simply, and free of charge, and effectively.

E

eternals, 2011-01-17
@eternals

On server. Firewall. IP filtering.
Still as option record of the gateway from computers is erased. But then mail should be allowed through a local proxy.
You can also hide browser shortcuts. =)

R

rasa, 2011-01-17
@rasa

I solved this issue by installing Outpost to the client, then we leave several programs in the rules there and set the firewall policy to “prohibit what is not allowed”. Then we set a password to change Outpost'a settings.

A

alex_dredd, 2011-01-18
@alex_dredd

Well, you somehow route people to the Internet?
What is a router?

R

ReaderMan, 2011-01-19
@ReaderMan

Can DNS server addresses be removed in the properties of network connections?

A

Aidos, 2011-01-19
@Aidos

Well, either close port 80 and 443 on the router or on the antivirus, it's a matter of setting up and setting the password for the antivirus