Policy Central Professional Entrprise Forensic Software hell

[elloyd69]

Thank you, thank you, thank you........been trying to stop the kids using IP addresses for ages and now I can block them!!! I am eternally grateful. Now I just have to try and stay one step ahead of the kids!

[Wils86]

no worries, we block loads of game sites and other bits that make the internet fun, I am quite bitter lol, if you want the txt files of everything we block so you can import/incorporate into your filtering your welcome to it.

 

We shorthand a lot of stuff like *gam* and *online* to block alot of online gaming sites. Also look out for foreign game sites as well, our lot got clued up

[elloyd69]

Yeah I have times when I'm really bitter too...........kids don't need fun!! LOL Thanks for the list, I'll certainly use it.

[Wils86]

no problem mate, funnily enough i say the same thing, there here to work not play. If you have any more trouble let me know. Im getting quite good with PCE.

[elloyd69]

Yeah me too, I love it. Got to meet with SMT next week to explain it to them!!

[elloyd69]

More problems with PCE. Have managed to send test mail through PCE server but not through local server, however it's not allowing any email reports to be sent...........any help greatly appreciated!! Why can't these things just work the first time!!

[Wils86]

check your spam filter for the email reports cuz when we set it up they were getting caught by our filter. Could you explain on the first poart of post about local server email please?

[elloyd69]

On PCE you can select their server or their server to send email from, we've tried both. It's not the spam filter. PCE is telling me the email addresses are a problem despite sending the test email to the same address........

[Wils86]

We use the forensic software server, have you stated if your on a proxy or not on the same page? Sounds stupid I know but ive done it, have you made sure your email is in correctly?

[elloyd69]

Yeah the emails are in fine although it's telling me that's what the problem is. However I know they're fine 'cos the test mail is sending just not the reports!!

[Wils86]

on the user tab, click it to get to the main menu and you see a tab saying alerts. select it and it'll take you to a screen saying 'enable email alerts' make sure the threshold isnt to high, we set ours to 25 and admin defined at 5. we also enable nortification of tampering but this goes off if you install pce as well lol.

 

make sure the groups you want to be notified about have the alerts tab setup this way as they are all separate to each other.

 

Sorry if thats no help or doesnt make sense, explanations are not my strong point lol

[elloyd69]

Yeah, it does make sense and I've done all that........still nothing. It's telling me that the email addresses are wrong but I know they're not 'cos I've sent the test mail and that worked.....ARGH!!! I'm going to phone PCE when I get a minute...I hate when I can't sort these things myself!!

[Wils86]

believe me I know the feeling, if they tell you how to fix it let me know cuz its startin to bug me now

[elloyd69]

Am now able to sent reports (thanks to Paul at PCE, who remotley accessed the server and fixed it!!). However when i try to open the reports it tells me the server can't be found Going to have to call them back tomorrow.............

[patshaw101]

I wondered if any of the mature PCE users would mind posting what they use as thresholds for the alerts. We're starting out using PCE, and I'm getting alerts every minute of the day. I know that part of this is down to us needing to get a handle on blocking URL's and exempting URL's from scanning, but I don't know how our thresholds compare with other PCE users.

 

I've got the violation check delay set to 60 seconds and our trial group alerts set as follows: Porn 5, Pred 1, Prof 5, Acro 10, Drugs 2, Suic 1, Racism 2, Net Sec 5.

 

I want to get an idea of whether the above is normal compared with other schools, or if it's configured too sensitively, compared with other schools.

 

I appreciate that the thresholds may be sensitive information for schools, but assistance would be appreicated to help me reduce the frequency of alerts as 90%+ of them are false positives.

 

Thank you.

[alan-d]

All ours are set to 20 with the exception of Network Security which is set at 2. However, I do manually check the captures on a regular basis.

[featured_spectre]

we gave up after 6 months of using it and demanded a full refund for it (they had an engineer come out and watch us uninstall it from our server and set up a GPO to remove it from all adjoining equipment).

 

In the 6 months it was in our school, nobody could connect to the internet for the first few weeks, webpages wouldnt load, even though we had whitelisted the software that we use (the exe files and the name of the software) it didnt let us load anything other than vanilla XP software (notepad, wordpad, calc etc). As you can imagine, it annoyed alot of people, me especially!

 

Never again will I touch this software and never will I recommend it!

[patshaw101]

Thanks Alan - what's the duration between captures (ours is 60 seconds)?

[alan-d]

Sorry - forgot that bit ours is 45 seconds with black and white only. Capture limit is 50

[amcdonald2009]

After installing SQL and .net framework I then tried to install PCE on a blank windows 2003 server i keep getting the error message -

 

There was an eroor logging in to SQL Server

SQL Server error:"[DBNETLIB][ConnectionOpen((Connect()).SQL Server does not exist or accessed denied (17)

 

??????????????????????? has anyone go any ideas? thanks.

[andy_b]

I think this helps:

 

Policy Central Enterprise Knowledge Base