.
/v3-uk/news/2005092/enterprises-struggle-social-network-bans
08 Nov 2007, Tom Sanders in California , V3
Enterprises are having difficulty coping with the rise of social networking sites such as MySpace and Facebook.
Around 70 per cent of all enterprises block access to some specific internet domains, according to a recent study by analyst firm Gartner.
Half of the companies who use web filtering equipment from Barracuda Networks block access to MySpace and/or Facebook, the two most popular online social networks. Barracuda based the findings on a sample of 2,400 customers.
A separate survey by the security vendor found that 70 per cent of respondents cited the prevention of virus and malware infections as the primary reason for restricting employee surfing.
Another 51 per cent of companies mentioned productivity drains, while other reasons included bandwidth concerns and regulatory requirements to control employee communications such as privacy legislation or insider trading rules.
The risks can be as much perceived as real, according to the survey. Rather than an all-out ban on MySpace or Facebook, companies can prevent malware infection much more effectively by scanning web traffic.
However, Gartner found that only 20 per cent of enterprises use such a malware defence.
Companies blocking social websites tend to do so only when they notice a spike in traffic to such services, according to independent security analyst Fred Cohen who suggested that the blocks come from a perceived need to control employees.
"Often there is no specific risk [from social websites]," Cohen told vnunet.com. "But companies have the flawed believe that they are in charge."
Filtering web traffic is not without its pitfalls. Many employees perceive the practice as demonstrating a lack of trust, warned Peter Firstbrook, a research director covering security at Gartner.
"Considering that most organisations expect employees to work extra during off-hours, they must accommodate workers' needs to conduct home life activities while at work," he said.
Instead of instating a blanket ban, Firstbrook urged companies to monitor traffic and reprimand individuals who exceed fair use.
"Since monitoring web activity is easy, catching the people who are wasting time on social sites is also easy," he said. "It is counterproductive to punish all workers for the potential transgressions of a few."
Gartner has predicted an increased level of granularity in the control of web traffic in the future. Employees might be allowed to view Facebook profiles and messages, for example, but would be blocked from editing the profiles.
Do you agree?
Blocks Everything
Echostar/Dishnetwork blocks everything. Its probably why people tend not to stick around here very long.
Posted by John G, 12 Nov 2007
WTF?
I've never seen so many silly comments in an article ever before. We should monitor access should we? Well, obviously, but who has the staff to sit there doing that all day? Or responding to alerts? The simplest solution is to restrict access. Causes resentment in staff? Nuts to that. I have some sympathy with the idea of giving greater access outside of business hours, but who want to pay for all that bandwidth and just have it wasted?
The policy in all the businesses I'm familiar with is "business use only". One thing not mentioned in this article is liability - if your worker is using on-line banking or shopping and gets their money stolen (e.g. they go to the toilet and leave their computer logged on), the company at least is going to have the police show up on their doorstep. Worst-case scenario, you could be held liable for crappy web management practices.
Also there are data protection concerns - who the hell wants their employees blathering on about what's going on at work on Facebook? Especially during business hours!
Only 20% of companies use filtering on traffic do they, I have no doubt that is the case as URL filters are (a) cheaper and (b) stop productivity loss as well as malware.
I wonder whether the people being quoted in this article have ever actually worked in an IT dept. or have a basic understanding of the laws governing IT. Basically just salesmen pontificating because they make more money if people have less restricted access or buy more web management tools.
Posted by Steve, 16 May 2008