[Jibagar]

Hey guys. Am in charge of maintaining the internet connection and access in our company. But am facing a challenge of how to permit and deny internet access to the rest of the staff.
1. Is there a way of doing this?
2. Which type of software do I need?

I use the Dynamic IP addresiing... That is, the computers obtain the IP address automatically...


How do I do this?

;)

[ScottGem]

I moved this to the Networking forum because it deals more with your internal network, than the Internet.

You need to define what you mean by permit and deny access. If you want to control access, this can usually be done on the router. However, if you want to filter access (control what sites are available) this gets more complex.

[dnandoo]

You may want to look into software called Websense.

[chuckhole]

What type of network security model do you have? Is it an Active Directory model with centralized client/server security?

There are network appliances that perform the role of Internet proxy and security. There is also server based software such as Microsoft Internet Security and Acceleration (ISA) Server (what we use) and there are shareware options for proxy servers that are less sophistated.

Most of the appliances are dedicated more to security than to the proxy side of things. ISA server is a good fit for us since it allows for very granular rules based access for user accounts, IP addresses and group memberships. Like the appliances, you can also filter for content, specific web sites, domains, etc. You can even limit access to specific web sites on a per user basis and open the ports of your choice.