Users: The Threat From Within

Everything Web
Web Browser Has Become the Universal Client
But Brings
Business
Risks!
Network Abuse
Back Door
Viruses
Inappropriate
Use
P2P file sharing
Audio/Video Streaming
Spyware
Web email
Instant Messaging
P2P file sharing
Web surfing
Instant Messenger
P2P file sharing
ProxySG - User & Content Control
Public Internet
Internal
Network
Comprehensive, flexible content policies
High Performance Appliances
User Control
URL Filtering
Virus Scanning
Instant Messenger Control
Peer-to-Peer blocking
Logging
ProxySG Family
ProxyAV Family
A Day in the Life of Bob Kent
Visibility. Then Control.
A Day in the Life of Bob Kent
Bob Kent
*******
LaunchInternetExplorerBrowser
FindsanddisplaysinformationandWebsitesontheInternet
10:45
10:46
Microsoft Corporation Microsoft Internet Explorer
http://my.yahoo.com
Deferred Access Policy Microsoft Internet Explorer
Welcome Bob Kent to Edge Corp. intranet and Internet connection
News of the Day: Employee meeting will take place in the restaurant at 3:00 pm today
Before accessing the Internet, you must read and acknowledge our corporate acceptable use policy
http://intranet.edgecorp.com/aup.html
CLICK HERE TO ACCEPT AND ACCESS THE INTERNET
Any IT problems, please email IT Support Desk or call extension 2875
IP address: 10.150.1.130
Date February 20, 2004
Time: 9:15 am
CLICK HERE TO ACCEPT AND ACCESS THE INTERNET
10:46
http://www.mysite.com/?comply://my.yahoo.com
10:59
Yahoo! Microsoft Internet Explorer
http://www.katysfriends.com
Adult Content Policy Microsoft Internet Explorer
10:59
http://www.sportspages.com
Hello again, Bob Kent
This is a message from the IT department. The website you are trying to access:
www.katysfriends.com
Is listed as a site within the category ADULT CONTENT and you are not allowed to visit this site.
Our Internet Acceptable Use Policy is available here: http://intranet.edgecorp.com/aup.htmp
For more help, email IT Support Desk or call extension 2875
Sport Denied Policy Microsoft Internet Explorer
11:01
http://www.amazon.co.uk
Hello again, Bob Kent
This is a message from the IT department. The website you are trying to access:
www.sportspages.com
Is listed as a site within the category SPORTS
This category of site is accessible by you before 9:00 am, between 12:00 and 1:00 pm and after 6:00 pm
Our Internet Acceptable Use Policy is available here: http://intranet.edgecorp.com/aup.htmpAny
For more help, email IT Support Desk or call extension 2875
Amazon.co.uk Welcome! Microsoft Internet Explorer
11:15
Hello again
Bob Kent
This is a message from the IT department. The
company policy is to allow users access to shopping
sites, however all access is logged and sent to
management every week.
This window will disappear in 5 seconds.
http://www.thetimes.co.uk
CNN.com Microsoft Internet Explorer
11:32
11:32
http://www.cisco.com/jobs
Hello again
Bob Kent
This is a message from the IT department. Your role
allows you to access news sites for a maximum of 15
minutes a day. Please continue.
This window will disappear in 5 seconds.
Deferred Access Policy Microsoft Internet Explorer
11:59
Hello again, Bob Kent
As valued member of staff, we want to make sure you are happy here at Edge Corp.
If you would like an interview with HR to discuss your role, please email me.
Best Regards,
Lucy Smith
10:46
Microsoft Corporation Microsoft Internet Explorer
http://www.hotmail.com
2:05
Deferred Access Policy Microsoft Internet Explorer
Hi Bob Kent,
Edge Corp employees are permitted to access personal, Web-based email accounts.
However, all file attachments will be scanned and infected files deleted. Excel and zip files cannot be sent.
CLICK HERE TO CONTINUE
Any IT problems, please email IT Support Desk or call extension 2875
IP address: 10.150.1.130
Date February 20, 2004
Time: 2:05 pm
CLICK HERE TO CONTINUE
10:46
http://www.mysite.com/?comply://www.hotmail.com
2:05
MSN Hotmail Inbox Microsoft Internet Explorer
Bob_kent@hotmail.com
Joan_smith@yahoo.com Funny email from Jack R. Mar 31 29KB
Youvewon@Vacations.com Win A Trip for Two To Hawaii Mar 31 768KB
Hotmail Staff Increase your email capacity Mar 30 1KB
KJT607web@zwallet.com Heres Your File! Mar 30 29KB
Sam Johnson Did you see the game last night? Mar 30 7KB
Cassandra Love Call Me. Mar 30 540KB
Joan_smith@yahoo.com Dinner with Peg and Alan on 4
th
? Mar 30 29KB
Mary Smith Did you call mom and dad about photos? Mar 29 19KB
Kyle Lissabet Win a free computer. Mar 29 760KB
2:06
http://www.hotmail.com
MSN Hotmail Inbox Microsoft Internet Explorer
Joan_smith@yahoo.com Funny email from Jack R. Mar 31 29KB
Youvewon@Vacations.com Win A Trip for Two To Hawaii Mar 31 768KB
Hotmail Staff Increase your email capacity Mar 30 1KB
KJT607web@zwallet.com Heres Your File! Mar 30 29KB
Sam Johnson Did you see the game last night? Mar 30 7KB
Cassandra Love Call Me. Mar 30 540KB
Joan_smith@yahoo.com Dinner with Peg and Alan on 4
th
? Mar 30 29KB
Mary Smith Did you call mom and dad about photos? Mar 29 19KB
Kyle Lissabet Win a free computer. Mar 29 760KB
Youvewon@Vacations.com
March 31, 2004 2:35 pm
Bob_kent@hotmail.com
Win A Trip for Two To Hawaii
Free_trip.pif
Bob_Kent@hotmail.com,
Youve won a free trip to Hawaii.
Download the Attached claim form to register and win your trip !
2:06
Bob_kent@hotmail.com
http://www.hotmail.com
MSN Hotmail Inbox Microsoft Internet Explorer
Joan_smith@yahoo.com Funny email from Jack R. Mar 31 29KB
Youvewon@Vacations.com Win A Trip for Two To Hawaii Mar 31 768KB
Hotmail Staff Increase your email capacity Mar 30 1KB
KJT607web@zwallet.com Heres Your File! Mar 30 29KB
Sam Johnson Did you see the game last night? Mar 30 7KB
Cassandra Love Call Me. Mar 30 540KB
Joan_smith@yahoo.com Dinner with Peg and Alan on 4
th
? Mar 30 29KB
Mary Smith Did you call mom and dad about photos? Mar 29 19KB
Kyle Lissabet Win a free computer. Mar 29 760KB
Youvewon@Vacations.com
March 31, 2004 2:35 pm
Bob_kent@hotmail.com
Win A Trip for Two To Hawaii
Free_trip.pif
Bob_Kent@hotmail.com,
Youve won a free trip to Hawaii.
Download the Attached claim form to register and win your trip !
2:06
Bob_kent@hotmail.com
http://www.hotmail.com
Free_trip.pif
Hello
Bob Kent
A virus was detected in the file you were attempting to
download.
The attachment/file has been successfully deleted.
2:08
10:46
Google Microsoft Internet Explorer
http://www.google.com
2:12
2:08
10:46
Google Microsoft Internet Explorer
2:12
breast
http://www.google.com/advanced_image_search?hl=en http://www.google.com/images?as_q=breast&svnum=10&hl=en&i=Google+Search&as_epq=&as_oq=&as_eq=&imgsz=&as_filetype=&imgc=&as_sitesearch=&safe=active
WindowsMediaPlayer
Playsyourdigitalmediaincludingmusic,videos,CDs,DVDsandInternetRadio
1:45
1:46
Hello again
Bob Kent
Streaming media can adversely effect
network performance and employee productivity.
You cannot access Internet radio sites, or streaming media from
entertainment and sports sites.
Streaming from approved business sites is limited to 128Kbps.
You can access streaming media from internal sites with no
restrictions.
LaunchKazaa
1:52
Bob Kent...
What are you up to now?
Peer-to-peer applications are forbidden on Edge Corp. resources.
This application will not be allowed to connect to other P2P nodes.
Please uninstall your P2P client on your computer or your Internet access privileges will be taken away.
Click here to read the AUP or contact IT support desk on x2785
<http://intranet.edgecorp.com/aup.html>
1:52
Disconnected
Microsoft Internet Explorer
Hello
Bob Kent
This is a message from the IT department.
We noticed that your PC was about to download some
spyware. We have saved your PC from infection
http://www.sillysmilies.com
Microsoft Internet Explorer
Hello, Bob Kent
This is a message from the IT department.
Your PC has just tried to send information to a known spyware site.
www.gator.com

We have blocked the spyware from sending your personal information out of the organisation (using our
Proxy appliance), however your PC will run more slowly until the spyware is removed.

We are about to redirect you to the spyware removal software to remove this and any other spyware
from your PC, please click on [OK] to start.

For more help, email IT Support Desk or call extension 2875

Provided by Edge Corp IT Support in conjunction with:
BobK: Hey Martin, whats the price of model R?
MartinS: Its 2,500
BobK: Great, thanks
BobK: Hey Martin, how are you?
MartinS: Great, what about you?
BobK: Not too bad
MartinS: have you heard about your results yet?
BobK: Hey Martin, I heard of a new development
MartinS: Oh yes, what?
BobK: Well, its project name is Goldengate and
Idbetter
dosome
worknow
Thank You!
The Threat From Within
Users bring potential threats
Time-wasting
Inappropriate content
Illegal and copyright content
Increased traffic, delaying business data
Web-based viruses
Sending out confidential information
IT Department needs
Advise Bob on Acceptable Use Policies
Coach Bob on best practices and time allocations
Enforce policy to control viruses, malicious code, legal liabilities,
adverse bandwidth use & reduced productivity

Thank You!
http://www.exlayer.co.uk/service/bluecoat.htm