Prevent others to bypass gateway filter

Greetings,

 

Securing gateway is a battle against external and internal threats. External threats are malware and spam email. For these kind of threats, there are various anti-malware software out there. I'm convinced the most popular one is a Symanctec Web Gateway. 

 

For internal threats, these mainly involves around the users. What do they install on their workstations? What are the restrictions on users' workstations? What method will they utilize to bypass these restrictions? The most common circumventation method used in companies and schools is proxies. There are several types of proxies, but one thing is certain, they need to be blocked. Normally, you will have to implement HTTP URL filtering, Inputting proxy websites and IP addresses in the blacklist, HTTPS and certificate filtering, and packet signatures or pattern detection, which filters text-based protocols and binary protocols.