Logging

asalespatron · Joined: 06 Jun 2005 Posts: 9 Location: California

A couple of questions. Pls answer throughly.

1. Can FirstSpot log user activities such as websites visited?
2. Will Firstspot work non-http traffic such as peer-to-peer, telnet, ssh, etc.
3. What type of logging is available from FirstSpot?
4. Why is the Remote Registry Service has to be started. This service, when turned on will make any Windows machine vulnerable to hackers?

Thanks...

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

1) Please check out suggestion at http://www.patronsoft.com/forum/viewtopic.php?t=398 .

2) Yes. Once the users login, he can use any application.

3) FirstSpot will keep track on source IP/MAC, login/logout time, duration and data transfer for each session.

4) Remote Registry Service is needed because RRAS depends on it. Consider using a router/firewall in the Public Network Interface side to protect FirstSpot.
_________________
~ Patronsoft Limited ~

asalespatron · Joined: 06 Jun 2005 Posts: 9 Location: California

Can you elaborate more on logging (logs) and authentication.

1. Logging - can we capture the URLs where the users go in-case there is an investigation?

2. Authentication - When a user tries to use a peer-to-peer software such as Donkey or Instant messaging, how does firstspot handle the authentication part of it since the software is designed to work specifically for Web browsers to redirect traffice.

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

1) Again, FirstSpot does not currently track URL. You need to track it in the router between Public Network Interface and the Internet

2) User needs to first login FirstSpot via the web. Once the login is completed successfully, he can use any application such as eDonkey or IM.
_________________
~ Patronsoft Limited ~

gilbertv · Joined: 25 Jun 2004 Posts: 24

For legal purposes there should be some type of customer online activity tracking. This is especially true for customers who visit questionable websites; ex: homeland security issues, child porn issues etc etc.

Can someone please suggest a solution that works and is not difficult to deploy?

I hate to be the one who has to answer to the FEDS, and not be able to provide any useful information that doesn't implicate me or my employees.