proxy sites in schools

[Millsy79]

Can any one suggest the best way stop pupils accessing proxy sites to get around our filters. the only methods i've been able to use have been reactive i.e. using tools such as ranger remote to watch the pupil activity and then banning the undiserable sites they visit and also using securus to log activaty on the network. The problem is that these methods require the pupils to access the problem sites first, i would like a more proactive method that stops the pupils accessing these sites in the first place.

 

Cheers for any help you can give me

[plock]

The use of a good filtering service, something like Smoothwall or Bloxx perhaps?

[elsiegee40]

A good filtering service as suggested above plus keeping an eye on these forums for tip offs!

[FN-GM]

We use websense filters most of them. Anymore the kids use i will add to the list as we find them.

[Lithium]

Add the kid to a No_internet group in Active Directory and assign that group to a GPO which sets a totally random proxy address which doesn't work - hours of fun...

 

 

Or do zero tolerance. Both work

[iatkinson]

We use websense filters most of them. Anymore the kids use i will add to the list as we find them.

 

Exactly the way we do it, plus keep a look out online for any new lists, sometimes means we beat the kids to finding them. On an unrelated note Websense doesn't properly categorise some of the file storage aspects of Bebo and this can be used to circumnavigate websense if you've got bebo blocked. Need to explicitly add some of the URL's.

[tom_newton]

@Millsy: Feel free to demo our content filter - just drop me a line (PM, email, phone... all good!), but if you're looking around just make sure you get something that isnt purely list based *or* purely content based, in this day & age you gotta have a hybrid solution.

 

The best way to deal with proxies is content/construction analysis, which is what we do. Admittedly, some are turning HTTPS, which is a problem. At present, we advise our users to only allow a specific set o whitelisted HTTPS sites, or only allow HTTPS for staff (or a little of both). We are working on ways to make HTTPS proxies much less useful though - watch this space

[Vegas]

We use the script that was posted on here last year to capture students IE history, then every couple of weeks we search for various terms (proxy, porn etc. use your imagination!). When we find abusers they are immediately added to a seperate OU with no internet access and that redirects their web page to one informing them that they need to see the Assistant Head. They are then shown the evidence and warned about internet safety, if they are then caught a second time their parents are called in for a meeting with the headteacher. 8 months ago proxy use was rife but now that word has got round we are not catching anyone!

 

Thanks to the edugeeker who posted the script.

[bclarke]

I had a big problem with Proxy sites in the past, then bought a Bloxx system which blocks all proxy sites (not cheap though). It's a reliable and very intelligent system and has totally stopped students using proxies. I also monitor what students are doing using AB Tutor, the best on the market as licensing is very cheap and per tutor not per computer. With both of these solutions, a good usage policy and discipline procedure it works very well.

[wesleyw]

Is the script still available for download?

 

 

Wes

[Geoff]

See this thread:

 

http://www.edugeek.net/forums/showthread.php?t=7371

[plock]

I had a big problem with Proxy sites in the past, then bought a Bloxx system which blocks all proxy sites (not cheap though). It's a reliable and very intelligent system and has totally stopped students using proxies. I also monitor what students are doing using AB Tutor, the best on the market as licensing is very cheap and per tutor not per computer. With both of these solutions, a good usage policy and discipline procedure it works very well.

 

We have the Bloxx system also, very impressed. Again, not cheap.

 

We use the Bloxx reporting tools to track students Internet usage.

[Edu-IT]

On an unrelated note Websense doesn't properly categorise some of the file storage aspects of Bebo and this can be used to circumnavigate websense if you've got bebo blocked. Need to explicitly add some of the URL's.

I don't suppose you can remember what the URL's are?

[iatkinson]

I don't suppose you can remember what the URL's are?

 

My mistake, not URL's. Need to block RegEx: bebo.com rather than explicitly blocking http://www.bebo.com.

[skunk]

We operate a whitelist for years 7-11. Now we are six months in we have very little maintenance on it to perform. It has made a huge impact in the classroom, with students actually remaining on task for at least half the lesson now.

 

We monitor 6th form activity (occasionally) and the head of sixth form comes down very heavy on those who abuse the system. They have now got the message.

 

I would rather give the students free access to the web and let the teachers educate them in appropriate use. Yeah, I know, I know.

 

We looked into websense, securus, policy central et. al. but they seem quite expensive when we have a very tight budget and would rather spend the money on positive software that improves the kids education.

[scottlee]

O have never heard of the Bloxx system, but we use WebMarshal, although its good we still have to enter in at least 20 sites a week that our students somehow find.

[tom_newton]

Scott: Drop me an email with your details and i'll send you a evaluation download of our filter - i can promise you a lot less proxy problems, and (though I say so myself) one of the best value solutions around.

 

It will also mean you don't have to block firefox, because there simply won't be any point in anyone using alternative browsers - with the correct filter, set up the right way, there shouldn't be any "ways around".

[FN-GM]

My mistake, not URL's. Need to block RegEx: bebo.com rather than explicitly blocking http://www.bebo.com.

 

I make sure i do it that way, when i was at school i used to use that loophole!

[Edu-IT]

I make sure i do it that way, when i was at school i used to use that loophole!

I'm sure it's already blocked but I will check. Thanks iatkinson.

[georgebush]

We use Policy Central Enterprise, its more reactive the the way we have it setup, we get one or two kids use proxies a week now rather than all of them as they know that they'll get their internet banned and visit from the ICT coordinator who'll be armed with reams of weblogs and screenshots of their desktops. Theres a new version out at the end of this month too thats meant to be a massive improvment.

 

I was told that the new Cleo Cachepilots, Network Edge Devices I think they were calling them have the facility to let Cleo collate everyones ban lists and send the data out to everyone, kind of like everyone pooling together to list proxies and games sites, if that works properly it could make things far easier. We already swap cachepilot lists with another local school but this would be in another league.

[cosmicegg]

We use Surfcontrol for Isa . This has built in categoties one of which is proxy sites. A combination of this and zero tolerance has kept abuse levels very low