Answer the question
In order to leave comments, you need to log in
Is there any way to bypass the proxy settings?
In the organization, Mikrotik ( 192.168.2.100 )
is used as a gateway on client machines . In addition, a proxy server ( 192.168.2.80 ) is registered in the settings of the Internet Explorer browser on client machines via GPO and a ban on changing these settings is set for a regular user. Since we have a domain (AD), a regular user is not allowed to change network connection settings.
Can a regular domain user somehow get around all these restrictions on changing proxy settings, network settings, etc.? The proxy is filtered by social networks.
Answer the question
In order to leave comments, you need to log in
people will still use social networks with the help of anonymizers and all sorts of mirrors for social networks.
it depends more on the filtration technology.
You can access the proxy settings by installing your browser or by running the portable version if you can't install it. Therefore, in addition to the proxy, you also need to:
- block port 80/443 - and in general all unfamiliar ports to the outside, except for the "white list", if there is one. This will immediately break off the “kakers”, who imagine themselves smarter than everyone else and start going through the VPN.
- take statistics from a proxy, preferably with a breakdown by accounts and from time to time look at who goes where and whether there are sites like sdjfweiwefkilj.---pasushami.com with a huge amount of traffic or sites like anonymouse.com. This will cut off those who know the word "anonymizer"
- divide users into groups, issue different access rights, block not only social networks, but also means of bypassing blocking - that is, do exactly what our government is doing now :)
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question