Webfiltering - what do you use - assuming you do.
-
@johnhooks said:
pfsense can do it, but if I remember correctly it just uses squid. You could just fire up a squid vm and use that.
nearly all free solutions are Squid under the hood.
-
@Breffni-Potter said:
It might be worth identifying if the boss wants to spend money tackling this issue or if he wants to tackle non productivity.
.This ^^^^
Blocking Facebook is about proving impotence, it does not fix business problems. Facebook isn't a problem, it's just a website. if the problem is people not working, this isn't a solution. It's avoiding the solution. All it is likely to do is demonstrate to staff that management is out of touch and lacks control. Lots of them will likely not even notice that it has been blocked, people will work around it, use their phones or go to another site.
My guess is this actually hurts productivity because it makes management and IT spend their time and money implementing technical solutions designed to avoid an HR issue.
-
@Dashrender said:
Untangle is another thing for me to look at.
Just a poor implementation of Squid with a horrible interface and unnecessary overhead.
-
I have not used a squid proxy in a while, but has it improved to handle SSL? when used transparently?
-
Better than it used to (which was not at all) but it seems pretty limited. Been a long time since I configured one.
-
@scottalanmiller said:
@Breffni-Potter said:
It might be worth identifying if the boss wants to spend money tackling this issue or if he wants to tackle non productivity.
.This ^^^^
Blocking Facebook is about proving impotence, it does not fix business problems. Facebook isn't a problem, it's just a website. if the problem is people not working, this isn't a solution. It's avoiding the solution. All it is likely to do is demonstrate to staff that management is out of touch and lacks control. Lots of them will likely not even notice that it has been blocked, people will work around it, use their phones or go to another site.
My guess is this actually hurts productivity because it makes management and IT spend their time and money implementing technical solutions designed to avoid an HR issue.
I always found it amusing that managers wanted to block social media and other "time wasting" sites, but then can walk around and bother/waste other people's time all day.
-
@johnhooks said:
@scottalanmiller said:
@Breffni-Potter said:
It might be worth identifying if the boss wants to spend money tackling this issue or if he wants to tackle non productivity.
.This ^^^^
Blocking Facebook is about proving impotence, it does not fix business problems. Facebook isn't a problem, it's just a website. if the problem is people not working, this isn't a solution. It's avoiding the solution. All it is likely to do is demonstrate to staff that management is out of touch and lacks control. Lots of them will likely not even notice that it has been blocked, people will work around it, use their phones or go to another site.
My guess is this actually hurts productivity because it makes management and IT spend their time and money implementing technical solutions designed to avoid an HR issue.
I always found it amusing that managers wanted to block social media and other "time wasting" sites, but then can walk around and bother/waste other people's time all day.
They tried this at the bank that I worked at. Lasted minutes. Turns out the trading floors were communicating with customers over FB and blocking it constituted an SEC violation. The traders were talking about a lawsuit against the IT folks who thought that they could decide what people had access to.
-
All above pointed items are known - And I tend to agree with you.. those people who wasted time on FB will just waste it on something else.
As for phones, currently it's expected that people will use their phones for this, because it's off our network, not using our resources, except for power, we let then charge devices at the office.
I agree with you, Scott, This won't really solve anything, the lazy still won't do more work.
What other options should I suggest in how to fix the laziness other than firing someone.
Like Scott said about Burger King hiring people as a form of welfare, I think we are in the same boat, it's definitely not because they need the people.. fewer people who actually did the work would do better.
-
@Dashrender said:
As for phones, currently it's expected that people will use their phones for this, because it's off our network, not using our resources, except for power, we let then charge devices at the office.
The other thing worth mentioning here is that if this is the case, the point should have been to reduce network utilization rather than "people have been fooling around on". This makes more sense if the network is struggling. With only the rarest exception, I would suggest that if this is FB (rather than say YouTube or Netflix) causing this issue, this means that your network isn't up to snuff and people are already unable to work efficiently because the network is too slow and the better solution is to improve the network to where things like Facebook are pointlessly marginal in the performance of it and people are able to all things (fool around as well as work) at high efficiency. This way you solve several problems rather than potentially creating them. And address the actual issue rather than an artefact of the issue.
-
@Dashrender said:
What other options should I suggest in how to fix the laziness other than firing someone.
There is no solution for laziness. Read that sentence to yourself and see how silly it sounds?
"This person is a bad worker and doesn't do their job." Um, why is IT having this discussion at all? Is it because management is lazy and not doing their job? Well, sounds like maybe management is leading by example. Or HR is. Or both. IT cannot fix this, any attempt to do so is covering up the real issue and proving to the workers that it won't be fixed.
You can attempt to fix this issue by warning, yelling, making policies but at the end of the day, people who can't work, or don't want to work or feel no motivation to work are not going to work. If the issue is that they don't know how to work, someone needs to train them. Ensure that they have the resources that they need. Maybe they are on FB because they are waiting for the saturated network to do other things?
But if the issue is already identified as laziness, then there is but one solution and everyone knows what it is (insiders, outsides, management, HR, IT, children passing in the street) and no attempt to cover it up is going to improve things.
-
Also, as we know, blocking doesn't even make an attempt at stopping people doing things, blocking is generally considered the worst possible move because of the way that it interacts with the staff. What shops that are taking a bit more effort to address issues with the network do for this is prioritize work traffic (sites, traffic types, etc.) so that it always has precedence over leisure sites. That way sites like FB work but never interrupt work. If the concern is truly resources, then this solves that while keeping staff happy but while keeping the network from having issues and keeping work traffic snappy.
In this day and age, people use FB to keep track of family, kids, calendar, events - blocking it seems draconian and doesn't make people want to use their phones, it forces them to. Unless you consider your employees worthless, which should prompt you to question why someone is employee them, their time is too valuable to be intentionally taking them away from work and the work environment and sending them to another device.
FB on a work machine is fast and non-jarring. FB on a phone is jarring and causes a huge drop in efficiency.
FB on the phone also encourages people to leave their work station rather than to remain at it.
-
If you are going to do it, do it right.
https://www.forcepoint.com/product/content-security/websense-web-filter-security
AD integration, transparent, and damn near impossible to avoid. Nothing says "Get back to work drone!" than a block with their name, the reason why they are blocked, and no way around it. And now they are part of Raytheon, you can threaten them with Patriot missiles.
-
@scottalanmiller said:
@Dashrender said:
What other options should I suggest in how to fix the laziness other than firing someone.
There is no solution for laziness. Read that sentence to yourself and see how silly it sounds?
That really was a joke.. I know there is no solution for laziness, all you can do is work around it.
-
@PSX_Defector said:
If you are going to do it, do it right.
https://www.forcepoint.com/product/content-security/websense-web-filter-security
AD integration, transparent, and damn near impossible to avoid. Nothing says "Get back to work drone!" than a block with their name, the reason why they are blocked, and no way around it. And now they are part of Raytheon, you can threaten them with Patriot missiles.
I've had websense used before. The reason that they are able to do the "no way around it" that you can do with everyone else, is because they use a whitelist. Literally every site that you can go to is listed by them as "work appropriate." Problem is, tons and tons of things are blocked that you might want to use. Like Novell, they block Novell!! How weird is that?
-
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
What other options should I suggest in how to fix the laziness other than firing someone.
There is no solution for laziness. Read that sentence to yourself and see how silly it sounds?
That really was a joke.. I know there is no solution for laziness, all you can do is work around it.
There is a very obvious solution, stop employing and paying lazy people. Employing lazy people is just the most dramatic way to tell non-lazy people that you don't value their efforts. Not only do you want money on the lazy, but you demoralize the hard workers - effectively you mock them for working hard and often, they'll stop.
-
@scottalanmiller said:
@Dashrender said:
As for phones, currently it's expected that people will use their phones for this, because it's off our network, not using our resources, except for power, we let then charge devices at the office.
The other thing worth mentioning here is that if this is the case, the point should have been to reduce network utilization rather than "people have been fooling around on". This makes more sense if the network is struggling. With only the rarest exception, I would suggest that if this is FB (rather than say YouTube or Netflix) causing this issue, this means that your network isn't up to snuff and people are already unable to work efficiently because the network is too slow and the better solution is to improve the network to where things like Facebook are pointlessly marginal in the performance of it and people are able to all things (fool around as well as work) at high efficiency. This way you solve several problems rather than potentially creating them. And address the actual issue rather than an artefact of the issue.
Right again, FB traffic does not affect our network performance. Sure we don't currently have a blazing fast internet, but it's usable for us.
I am going to be upgrading some equipment this year, Gig to the desktop, larger internet pipe, but as you mentioned, the real issue is work not getting done, or not done right.
-
@Dashrender said:
Right again, FB traffic does not affect our network performance. Sure we don't currently have a blazing fast internet, but it's usable for us.
Facebook itself, no, it's not a bandwidth hog. But all the things branching out from Facebook, streams of videos, scams, and security risks. I used to block MySpace because of that when I had a limited bandwidth situation. Until I got my Peplink and shuffled non-critical traffic over the cheapest pipe I could find. Yeah, enjoy productivity now when pages load using a 1.5Mbps DSL line for everyone in the office.
-
When I worked for a place that used Websense to ban Facebook and other communications channels, what happened was a culture of going outside and standing in the courtyard. Because they blocked (and/or tapped) cell phone signals too. So to get a good signal you had to be outside. So everyone was. Everyone had meetings outside, spent every free moment outside, took breaks outside, lingered outside, picked backrooms by the outside doors, etc. It kept everyone away from their desks for huge portions of the day. The impact to productivity was insane.
-
This reminds me of workarounds like portable apps also. I didn't have admin access to the computer at the one place I worked, and I was there till 11 at night and really had no work to do past about 8. So I just used portable apps on a flash drive so I could do my business stuff and also play games.
-
Also brings up another question, why do places hire many lazy people vs few who work hard. In reference to the job offer I was recently given, I know based on what I was offered that the other "Systems Admins" make over $50K a year. I strongly believe based on what I've seen and heard that I could replace both of them and do the work myself. If the company is willing to spend upwards of $250K (including taxes, insurance, etc) for 3 people to do this work when 1 could do it by themselves, why would they even second guess giving me or someone else who can do it $150K a year to manage it? They wouldn't dream of paying one person that much, but do think it's ok to pay 3 not good employees that much?