Internet monitoring software?

[Pot Bellied Fool]

Picking brains again

Got another customer (of the paranoid type). I've helped him weed out problems in the past with porn getting downloaded onto their one net enabled PC when he's away.

But I'm now persuading them to bite the bullet & allow internet access to everyone's desktop (it's only a small outfit anyway & any skiving would be spotted). I'm giving him a fairly wide ranging AUP to incorporate into staff contracts and it'll all be av'd & firewalled quite happily. No server as such. All they do is share the Sage system around the network from the accounts bod's PC, just going to be changing their existing router for a decent hardware firewall/router/dsl modem combo.

But he wants to be able to get reports on what sites are being visited, how often, by which machine etc.

Anyone got any recommendations at the cheaper end of the market (he's a notorious skinflint too!!)

Cheers.

[Plotloss]

I'd guess its going to be tricky without a single point containing some intelligence that all outbound traffic is to be routed through.

[rich1231]

Router should have a syslog that it can throw out at a designated ip address.

[Pot Bellied Fool]

There'll be a half decent router/firewall going in that can talk via SNMP but I've never needed to look into monitoring before so don't know what software's out there (if any) that'll work for this situation. I was just hoping to save myself from the usual software suppliers' hype by going straight for a recommendation

The option of using a PC as a gateway is out due to cost (not only of hardware but in admin time).

Cheers.

[aldi]

Of course, here comes the 'L' word... Dunno if you speak linux but what I've done for a couple of people now is an older PC (like PII old) running a proxy called 'squid', and log analysis s/w called 'webalizer' and 'squint'. This dumps to html logs and graphs on a daily basis, with password protected browser access. Only maintanance so far has been sticking the odd thing in the access controll to bypass the login, e.g. AV update servers.

[rdhawkins]

My stuff does that (although it does a lot more besides so will probably be OTT and too expensive).

NetSupport DNA