RE: [cobalt-users] Email monitoring; Internet access restriction

["Vachon, Scott" <Scott.Vachon@xxxxxxxxxxxxxx>]

>I have a client trying to procure a Government Job.  In order to do this,
they have to have certain security measures in place.
>1)  They have to be able to monitor outbound email content for possible
transmissions of confidential information.
>2)  They have to be able to restrict internet access by user and/or
workstation.
>This customer has a Cube 2;  ISDN access; Netopia ISDN Router;  NT4;  and
they use IE and Outlook / Outlook Express.
>I thought I had restricted internet access at the desktop, but inbound
emails with a url  or link in them still connects to the internet.  Also,
Outlook
Express has an internet search window beneath the inbox that I can't seem to
remove.
>I think a proxy is called for in this situation.  Has anybody done this?
>I also need to account for outbound email monitoring, to be able to search
contents for specific words, phrases, etc.
>Can this be done with a proxy?  Has anybody been forced to implement this?

A simple but labor intensive way to proceed in restricting internet access
is to deny everyone on the network (or segment) internet access and then
allow by IP (if static) or user at the firewall. A proxy will need to be
used.
As for the Outlook Express, the internet search capability should be blocked
at the firewall depending on the permission you set for each ip address or
username. If you are using the Qube firewall there is a tool on the Cobalt
website which may help you configure it as you wish. 
For e-mail monitoring a google.com search should return several applications
that do this. I highly recommend obtaining legal advice if you do this as
any resulting lawsuits may be indefensible if proper notice is not provided
to the employees/users. :)