Are web threats still relevant? Why web filtering is an investment, not an expense!
June 30, 2010
By Christina Goggi on behalf of GFI Software Ltd

Web-based threats are constantly becoming more targeted and sophisticated. To achieve good network security, organizations need to implement a more advanced and active web filtering solution.

Besides costing US companies billions a year, the 30 to 40 percent of employee non work-related Internet use in the workplace (as reported by IDC Research) poses serious security threats to the company network.

Web security threats

When employees carelessly surf non-work related websites, they do not only waste time which could have been used productively but they would also be increasing the risk of malware and spyware infection. Innocuous-looking websites may have been hijacked to become a smokescreen for malware, such as targeted Trojans, used to gain access to the network, often bypassing signature-based anti-virus programs. This means that if an employee clicks on any links and download any software, this can pose a serious security risk.

Furthermore, if a company's network is infected by any kind of malware, this could have a negative impact on productivity and the company’s bottom line - interrupting, or even halting, a business's daily operations. Any kind of infection that attacks computers on an organization’s network can pose serious consequences; sales and orders could be lost, various important processes may not be performed in time, or the supply chain could get interrupted. Additionally, depending on the kind of attack, data could be compromised or stolen. This could lead to legal repercussions and risks for those whose personal information was stored in the databases and/or had a duty to keep it secure.

Why is web filtering essential?

Having email anti-virus and anti-spam software installed does offer protection, but only partially, as it will not protect against web exploits or stop employees from wasting time on the internet during working hours.

A solid web filtering solution takes network protection to a higher level by checking each and every download for malicious payloads, and quarantining or deleting any infected files. It also examines websites to check for hidden files or scripts that are surreptitiously downloaded when the user opens a link to that particular page.

Web filtering also gives business owners the tools they need to manage employee behaviour in accordance with an acceptable use policy, or to counter any claims from clients or employees. In an employment dispute, for example, an organization may need web browsing reports to substantiate its claims. A good web monitoring tool offers this facility.

Moreover, if employees know their web activities are being monitored, the chances of them procrastinating over non-work related websites become much lower and, consequently, productivity increases.

What needs to be done?

According to a study by GFI (2009), 61% of the SMBs (small and medium-size businesses) surveyed said they had Internet use policies in place. Yet the same study reported that only 47% said they had the means to monitor and/or filter traffic. A policy does not go very far without implementation: To enforce web security, solid web filtering software is needed.

Organizations need to invest in a good web filtering solution, such as GFI WebMonitor which enables administrators to enforce usage policies by monitoring employee Internet behavior. Strong features such as multiple virus scanners which prevent employees from inadvertently downloading malicious software, reduce the average time taken to obtain the latest virus signatures, decreasing the risk to the organization’s site by each new virus. Furthermore, since each engine has its own heuristics and methods, each brings its own unique strength in detecting and correcting for the ever-increasing variety of viruses.

Conclusion

Organizations need to understand that the cost of fixing any problems can be very high, and monitoring is a far less expensive – and simpler – alternative to dealing with a web-borne infection, data breach, extensive periods of downtime or lawsuits. Investing in a solid web filtering system is not an expense but an investment in security and business continuity.

This guest post was provided by Christina Goggi on behalf of GFI Software Ltd. GFI is a leading software developer that provides a single source for network administrators to address their network security, content security and messaging needs. More information about GFI web filtering solution can be found at http://www.gfi.com/internet-monitoring-software

All product and company names herein may be trademarks of their respective owners.