how to block specific user/ip to access specific domain in my network ? what should i invest/install?

Question

my office has internet access, it shared with every staff. The problem is some staff are likely to chat, play facebook, etc... i would like to create a network policy for certain user to unable to access specific domain, like technicians will unable to access facebook while sales team can. i only would like to monitor the traffic so staff will not able to download large file or play torrent which can cause slow internet connection. Also like to monitor sites they visit (log files) so they unable to access site that don't correlated with their duty (like porn sites, etc). i have windows server install (currently it act for internet sharing and file server only). Which software i should install ? or hardware should i invest ?

Answer 1

Internet Protocol security (IPSec) filtering rules can be used to help protect Windows 2000-based, Windows XP-based, and Windows Server 2003-based computers from network-based attacks from threats such as viruses and worms. This article describes how to filter a particular protocol and port combination for both inbound and outbound network traffic. It includes steps to whether there are any IPSec policies currently assigned to a Windows 2000-based, Windows XP-based, or Windows Server 2003-based computer, steps to create and assign a new IPSec policy, and steps to unassign and delete an IPSec policy.



IPSec policies can be applied locally or be applied to a member of a domain as part of that domain's group policies. Local IPSec policies can be static (persistent after restarts) or dynamic (volatile). Static IPSec policies are written to the local registry and persist after the operating system is restarted. Dynamic IPSec policies are not permanently written to the registry and are removed if the operating system or the IPSec Policy Agent service is restarted



For More Information and get instant computer help from Microsoft Certified Technicians follow the link given below

http://www.iyogi.net/

Answer 2

Hi,you can use employee monitoring software(networking monitoring software) which allows you to track workstations and individual users that may use multiple PC’s on a network and you can perform essential user activity monitoring, content filtering, remote administration, and more – from one central location.

http://www.spy-tech-monitoring.com/spytech-netvizor.html

http://www.pc-remote-monitoring.com

Answer 3

Your on the spot router, or a router that controls an get admission to factor (assuming the router is likewise the DHCP server) might have a DHCP purchasers table someplace in that's cyber web browser admin. the area of the table relies upon on the make and style of the router. This exhibits who's connected on your router at that cutting-edge 2d. some spiffy on the spot routers and get admission to factors have get admission to administration on them, the place thy dont have a password. yet they do have lists of computers that have the perfect utility on them, to get admission to the community. That way basically specific computers an connect the community.