Giving Users Extra-Firewall Access For Sites Normally Blocked?
Found on Slashdot on Sunday, 12 July 2015
My boss and I were having a discussion about our users accessing the internet. He wants the users to be able to log in to the firewall to be able to access external websites that they are normally blocked from accessing. They would get a 45-minute window to do this, and then if they need more time, they need to re-login.
This will seriously annoy users and have a negative impact on the workflow. If the systems require such a protection, the best solution would be to have one (of more) systems specifically for Internet access, isolated from the rest of the network (and with USB disabled so users cannot transfer files they have downloaded).