Spying On Staff 3 – How

I’m being a bit naughty in my continuing use of the spying word as it is one I disagree with, but it is good for the top line interest.

Anyway, in part 1 I put forth my case for ‘spying’ and in part 2 I expounded the benefits that employers, support staff and employees for that matter will gain. In this edition I want to suggest some ways you could actually go about monitoring and my prime criteria is that it has to be cheap or preferably free.Broadly speaking there are two approaches to monitoring once you’ve decided what it is you want to monitor. You can either implement a software or hardware solution or some combination of the two.

1. Software
2. Hardware

Whilst on the surface it would appear that you would have to pay for this there are ways of doing all you need for free. So taking into account that most churches will use Windows or Mac based computers here are some suggestions.

Windows based Computers.

• Configure and use OpenDNS
• On each PC run an install of K9 – a free for personal and non-profit (I checked with them) use.
• Utilise local”Security Policies” or centralise with Active Directory controls if running a Windows server.

Mac based Computers.

• Configure and use OpenDNS
• On each Mac run K9 – yes it works with Macs
• Utilise Active Directory integration if running a Windows server.
• And I’m sure Apple must have their own product.

Whatever.

• Utilise IPcop.
• or use Untangle.
• Ensure you use a router with basic NAT capabilities.

OK, so strictly speaking using IPcop or UnTangle requires you to have an old PC with two network cards in it. But then how many of us have access to an older PC that we no longer use? Right. And what about the purchase of a second network card? Right again – dirt cheap aren’t they. So whilst not strictly speaking free you are able to re-deploy older kit in a way not previously considered.

It also means you could effectively build a couple of spares should the  one in use die of old age.

Equally I haven’t addressed the nity gritty of creating policies or a how to on installing and setting up UnTangle – but then that was never the point here.

So what tools – be they software or hadware do you use to control, monitor, audit, lock down your infrastucture?