Question : Manage internet with Routing and Remote access

Hi there,

I would like to know if it is possible to use routing and remote access to monitor users internet access by forcing them to log in before they are able to use the internet. I know that one can use a proxy, however because we have routing and remote access installed, if they remove the settings they are able to browse the web no problem. I also have terminal server running so they are able to "log" onto the server and use that interface as well.  Unfortunately i have to use Routing and remote access.

Thanks

Answer : Manage internet with Routing and Remote access

If you block ALL outgoing access to the internet for port 80, 443 (http, https) and ONLY allow access through the proxy they cannot pass the internet access controls...

the other route could be to install a transparent proxy, that silently routes ALL traffic through a proxy.
http://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html

in the latter case there is no need to configure a proxy. For a transparant proxy you only need an extra system with two ethernet interfaces sitting between your network and the outside, it can also be configured to be run like a bridge (network switch like).