Internet/Network Access Control
Are your employees wasting time on
unproductive Internet sites?
If you are uncertain about this, you need LANguard.
“Organizations lose an estimated $50bn a year in
productivity due to employees web-surfing out of
personal interest at the workplace”
- Sacramento Bee
“Employees spend 90 minutes daily surfing the Internet
at work for their own interest”
- Webster Network Strategies
“Almost 90 per cent of senior executive staff surf the
Net at work seeking new jobs”.
- Exec-U-Net
“Companies that do not monitor employees’ surfing
habits make themselves vulnerable to legal liabilities,
probable bandwidth abuse and employee productivity
gaps”.
- The Aberdeen Group
Internet and Network Security
Ensures productive use of the Internet
LANguard enables you to monitor and control Internet usage
on your network, ensuring that the Internet is being used
productively by your users. In LAnguard’s network monitor,
you can view the sites that users are currently visiting as well as
any other Internet connections (like IRC, for example). Using
the LANguard rules engine, you can set up a network policy
that allows you to block or monitor particular sites and
particular types of traffic (e.g., IRC, WWW). Because
LANguard can also monitor the content of your users’ web
activity, you can block specific actions. For example, you could
prevent a user from performing an objectionable search on
Altavista, but not block access to the site!
• Protects against Internet misuse
(Internet access control)
• Helps to protect against external
threats
• Protects against internal threats
(unauthorized access to shares)*
• Can block access to web sites
• Provides reports on Internet usage
• Provides extensive security logging
• No network reconfiguration
• No performance loss
• No client reconfiguration
Helps secure your network against
unauthorized access
LANguard helps you block all TCP/IP external traffic from
the Internet and protect your network from electronic break-
ins, penetration attacks, hackers, and other threats.
Monitors internal network traffic for
threats
Many companies mistakenly assume that unauthorized access
is only attempted by external parties. Actually, the majority
of corporate security threats stem from internal sources,
such as users accessing confidential data and hacking into
shares to which entry is barred. Of course, your network
provides for security, but passwords are easily hacked and
many 'backdoors' exist. LANguard lets you know which
users are accessing specific shares on PCs. This way you can
quickly detect a user who has cracked another user’s
password.*
How does LANguard work?
LANguard uses revolutionary sniffer technology that allows
it to reside on any machine in the network. Unlike other
Internet access control products, that are based on using a
proxy server or a gateway, LANguard does not slow down
Internet access, does not require network reconfiguration
and does not require you to change Internet settings at each
workstation! This makes LANguard much easier to install,
deploy and maintain. LANguard can also be used in tandem
with a gateway firewall and protect from security breaches
arising within the protected zone.
What sites are your employees
visiting while at work?
“From the lowly file clerk to the high-
level executive, computer users are
openly or secretly navigating in
cyberspace, checking ball scores,
playing games, shopping for clothes,
reading movie reviews, perusing job
postings or even signing on at adult-
oriented sites”
- The Sacramento Bee (July 19, 1999)
Who is trying to access your site
without permission?
Throughout 1999, press reports
abounded about hackers who broke
into and vandalized a series of high-
profile US federal government sites.
The 1999 Information Security
industry survey found that 52% of
surveyed organizations reported
employee access breach in 1998.
Requirements:
• Windows NT4/2000
• 32 MB Ram memory, 12 MB
of free hard disk space.
• Ethernet Network Card
• The machine which is to run
LANguard must be able to
see all network traffic, i.e., it
must be connected to a
regular hub or, if using a
switch, it must be either
connected with BNC to the
Advanced, Global and Simple Rules
Powerful rules engine
LANguard includes a comprehensive rules
engine comprising global, simple and
advanced rules. These rules allow you to
specify in detail which types of traffic are
to be logged, blocked or alerted upon, as
well as from & to which machines. Using
these rules you can easily set up a company
Internet access policy AND enforce it.
Advanced content checking
LANguard can detect specific keywords in
Internet traffic, for example, if a user is reading
a web page with a certain keyword, or doing a
Search for that keyword. You can also specify
combinations of keywords.
Easy installation
The LANguard firewall is easy to install and
requires no specialized TCP/IP or network
security knowledge. You simply run the
‘setup.exe’ install program, and LANguard will
automatically detect and configure network
settings.
Alerts
You can configure LANguard to issue alerts
on particular occurrences to enable the security/
system administrator to take immediate action
Reports and detailed logs
LANguard includes detailed reporting options
to allow you to compile and analyze Internet
usage statistics with ease. LANguard also
compiles various detailed logs, listing all
protocol specific connections (servers) that are
accessesed including time/dates and by which
computer & transferred data.
SmartURL® technology to block
unproductive sites
LANguard can check for keywords in URLs to
determine whether a site is appropriate or not.
This method is much more efficient and
dependable than that of using a database of
inappropriate sites.
In 1993, there were 26,000 domain names in
use; in 1999 there were over 5 million web sites:
Because of the amount of sites that are added
each day, it is practically impossible to reliably
categorize the Internet. Instead, LANguard can
check for a keyword such as ‘sex’ in a URL and
therefore prevent access to that site. Keywords
for particular sites are unlikely to change and
therefore you can almost certainly block access
to unwanted sites.
Cost-effective
LANguard is very cost-effective compared to
other Internet access control products. Because
LANguard does not require a dedicated machine
and specialized know-how, set-up and
maintenance is easy. Initial purchase cost is also
much lower.
Network Monitoring

router and switch, or where appropriate.

connected using a separate
hub together with the router.
Download your evaluation version from http://www.languard.com

GFI FAX & VOICE USA GFI FAX & VOICE HQ

105 Towerview Ct. “Communications House”
Cary, NC 27513, USA Mediterranean Street
Email: sales@gfifax.com Tel: (888) 2-GFIFAX SGN07 San Gwann, Malta
WWW: http://www.gfi.com Fax: (919) 388-5621 Tel: +356-382418
info@gfiusa.com Fax: +356-382419
info@gfifax.com
GFI FAX & VOICE UK Ltd. GFI Australia (Fax & GFI FAX & VOICE Gmbh
5 Princeton Mews Communications) P/L Palmaille 59
167/169 London Road 26 Stirling Street, 22767 Hamburg
Kingston-Upon-Thames Thebarton, Germany
Surrey KT2 6PT, UK SA 5031 Australia Tel: 040-306810-0
Tel: 020-8546 0640 Tel: 0061-8-8351-7999 Fax: 040-306810-10
Fax: 020-8546 0741 Fax: 0061-8-8351-7997 info@gfigmbh.de
info@gfifax.co.uk

* Only works on networks which do not have switched hubs.

©2000 GFI FAX & VOICE Ltd. All rights reserved. FAXmaker is a registered trademark, and GFI FAX & VOICE and the GFI logo are trademarks of GFI
FAX & VOICE in Germany, USA, the United Kingdom and other countries. Windows NT and Windows 2000 are trademarks of Microsoft Corporation.