Ask the Expert

Preventing unauthorized downloads

Is there a simple method to prevent selected users on a network from downloading specific file types such as .exe and .zip off the Internet, while still being able to browse freely and download .pdf files?

Internet access is provided with Netscape 4.7 on a Windows 95 workstation, running Novell Netware 5 for approximately 100 users.


    Requires Free Membership to View

There is no sure way to prevent downloads such as you described, simple or otherwise. You can likely set up your firewall to look for filenames with the extensions you want prohibited and have them stopped. Some antivirus software can also be set to scan all downloaded files and can be set to look for executables. However, users who want to avoid all these prevention measures will find ways to get around them.

Do your computers have Zip Drives or high-density floppies? If so, these files can be downloaded elsewhere and then brought over by "sneaker-net."

What prevents a user from downloading an executable elsewhere, then using uu-encode or some other encoding scheme to turn the executable into a text file? They could then e-mail the encoded text file to the machine you are protecting, and decode the text file back into an executable.

The best answer is to have a clearly defined policy that unauthorized downloads or other unauthorized importation of executable files are not allowed, then enforce that policy. Be sure the policy states what the penalties for violation are, and apply the penalty when someone is caught.

Technical solutions to this problem are difficult at best, particularly given that you are using the insecure Windows 95 Operating System. There really are no access control restrictions for what a user can do on their local machine using Win95 or Win98. So the users are effectively the Administrator or "root" for their machine. Thus, solving the problem via policy and procedure is your best bet.


This was first published in April 2001

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: