Great Circle Associates Firewalls
(June 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: monitoring user's web usage
From: Matthew J Brown <mjb @ sophos . com>
Date: Fri, 16 Jun 1995 08:54:33 +0200 (BST)
To: ddk @ beta . lanl . gov (David D Kaas)
Cc: firewalls @ GreatCircle . COM, ddk @ lanl . gov
In-reply-to: <9506151819 . AA15003 @ beta . lanl . gov> from "David D Kaas" at Jun 15, 95 12:19:03 pm

> We currently use the Cern httpd as a proxy server for our users
> to connect to the Internet.  It is possible that our management
> will be requesting that we monitor the logs for activity that is
> not work related.  These reports would/may then be used to correct
> the user's work ethics.
> 
> Are other sites monitoring improper usage?  How do you decide what
> is proper and what is not?

There are only two ways of doing this that I can think of:

(1) Manually check every site or page accessed

(2) Define a list of 'work-related sites' and only allow connection
    to these (with a procedure in place to get new sites approved
    in a simple and quick manner, otherwise this would rapidly become
    completely unworkable and probably bypassed by employees).

There's no algorithmic way of defining 'work-related' and therefore
no way you can automatically enforce only work-related use of the Net.

All the above leaves aside ethical considerations; my personal opinion
is that such monitoring is unethical as well as impractical, and will
be of little or no benefit to the company.

It's far better, far more practical and far more worthwhile to judge
employees by their results, not how much they use the Net nor the time
they spend in the washroom nor how long they spend away from their desks.
IMHO pressure to measure employee 'time theft' indicates an organisation
with no clue about how to measure employee *results* -- and results are
what matter.

If employees have enough work to do, and they know that their management
will *notice* how much work they do, they won't have time to do much
unnecessary netting, and the problem will sort itself out.  All this
without the resentment that intrusive monitoring causes.

If my employers started trying to monitor me to that degree, I'd probably
quit.  Their loss.

-Matt



References:
Indexed By Date Previous: What is the best approach?
From: Gilligan Markham <drib @ u . washington . edu>
Next: Re: Export restrictions for DES
From: fc @ all . net (Dr. Frederick B. Cohen)
Indexed By Thread Previous: monitoring user's web usage
From: ddk @ beta . lanl . gov (David D Kaas)
Next: Re: monitoring user's web usage
From: Andy Dent <ADent @ sni . co . uk>

Google
 
Search Internet Search www.greatcircle.com