7 ms·
That's still blocking, not actively monitoring. Probably because it runs all network traffic through their VPN.
by markus92 7y ago
That's still blocking, not actively monitoring. Probably because it runs all network traffic through their VPN.
- chrisseaton 7y agoHow do you block specific websites without monitoring which website is being visited? That doesn’t make any sense.
- jakelazaroff 7y agoFor example, downloading a list of prohibited domains to your device and running a local firewall. “Monitoring” in this context implies that someone will be able to later review the websites you’ve visited or tried to visit.
- tssva 7y agoEvery enterprises local firewall I know of can report back to a central system for logging.
- jakelazaroff 7y agoI don’t have any special knowledge of enterprise firewalls; parent just asked how it was possible.
- ameister14 7y agoYou can do it a couple of ways. You can whitelist sites, where all sites not on the list are automatically blocked, or you can blacklist them, where sites matching certain characteristics or on a particular list are blocked. Neither way necessitates logs or monitoring.
- deleted 7y ago[deleted]
- saiya-jin 7y agoHmm, what about this approach - monitoring adds a certain action on top of that blocked (or not) website you try to access. It gets reported, your credit/social/whatever score goes down. As a kid, you might have a talk with counselor, or your parents with principal. As working adult, you might get a warning or get fired. Your access to foreign travel, sim card, voting etc. might get altered.
- chrisseaton 7y agoThat's both monitoring and blocking. I'm not sure you can block without monitoring.
- raincom 7y agoBanks are strict on their work laptops. - Everything is tunneled through VPN - 2 FA - geofencing at VPN level (you can't take work laptop to Russia, India, China, etc) - everything is whitelisted. Some employees can only access x.theirBank.com, everything is else blocked. This is the case with tellers, folks in the retail banking - even for IT/dev, one should get explicit permission to get access to youtube, github - every work laptop comes with an agent like ZScalar, which enforces these policies by coordinating with a central server.
- chrisseaton 7y ago...but that sounds like monitoring?
- tyingq 7y agoSoftware like Forcepoint/Websense logs blocked attempts by default and can be configured to log all traffic. I don't believe there's a reliable source on what companies do. The Levandowski incident at Google revealed that they had VERY extensive logs. They appear not to look at them routinely, but the logs are there when needed.
- TurkishPoptart 7y agoWas that the IP incident between Google and Uber? can you say more about the evidence here or post a source? just curious.
- tyingq 7y agoYes. Here's the indictment: https://www.justice.gov/usao-ndca/press-release/file/1197991/download https://www.justice.gov/usao-ndca/press-release/file/1197991...