Help choosing endpoint security solution with https web filter

[LeetPirate]

Hello everyone, I am looking for a decent endpoint security solution that has a web filter capable of also blocking https websites.

 

I want to accomplish the following:

1. Protect employee computers from malware.
2. Prevent employees from wasting time on facebook and youtube and other life wasting websites during work hours but it would be good to also have the ability to schedule so that the life wasting can be allowed during lunch hour and after 4pm.
3. Seamless blocking of https, sometimes individual antivirus causes ssl certificate errors on the computers and I want to avoid this if possible.

 

I looked at some hardware web security appliances but the costs were very high and I am worried about obsolescence. The other issue with hardware appliances is that it's not easy to quickly whitelist a false positive and when downloading files you often have to wait for the appliance to scan the file first then you have to click download to get it from the appliance. My thinking is that with software I might be able to pay a fixed price each year but get updated products. I really like the Malwarebytes endpoint solution but I don't think it can do the web filtering part.

 

I would like to hear your thoughts, experiences, and opinions on the matter.

[vissha]

I think this would help you find the best Endpoint Security with the features specified by you:
http://www.av-comparatives.org/wp-content/uploads/2015/10/avc_cor_2015_en.pdf

&
https://www.av-test.org/en/antivirus/business-windows-client/  - Please view individual Usability Details
with
https://www.av-test.org/en/award/2015/  - Please view individual Usability Details

[Kalju]

1.  I'm sorry, but it is not possible in any way to do;
2. Do you have a prison? If not, then the best there is - pay salaries to employees for the work, do not pay if sitting only. 
3. this you can not in any way PREVENT

You have to give them a job, and not to wait, when and what they themselves are looking for. When the work is done, they get paid for it, not for sitting there only. If you do not give them work, do not pay a salary, what they will have to do there?

[knowledge-Spammer]

somethings i can help with but not all sorry

[jasonliul]

All you need is learn this lesson: how to encourage yr employees work hard for their future, and all of you're in the same line, working for this purpose together.

 

You're nothing, that's the point.

 

[Sylence]

I'm not gonna go through why you've come up with this decision cuz it's not my business.

 

so I suggest thiss

Use net monitor for Employees. I've personally worked with that. works for all except protection. for protection use Windows defender which comes free. or share their drives on network so you can scan them all time with your antivirus installed on your system

[straycat19]

6 hours ago, LeetPirate said:

Hello everyone, I am looking for a decent endpoint security solution that has a web filter capable of also blocking https websites.

 

I want to accomplish the following:

1. Protect employee computers from malware.
2. Prevent employees from wasting time on facebook and youtube and other life wasting websites during work hours but it would be good to also have the ability to schedule so that the life wasting can be allowed during lunch hour and after 4pm.
3. Seamless blocking of https, sometimes individual antivirus causes ssl certificate errors on the computers and I want to avoid this if possible.

 

I looked at some hardware web security appliances but the costs were very high and I am worried about obsolescence. The other issue with hardware appliances is that it's not easy to quickly whitelist a false positive and when downloading files you often have to wait for the appliance to scan the file first then you have to click download to get it from the appliance. My thinking is that with software I might be able to pay a fixed price each year but get updated products. I really like the Malwarebytes endpoint solution but I don't think it can do the web filtering part.

 

I would like to hear your thoughts, experiences, and opinions on the matter.

 

Microsoft System Center and Configuration Manager.  With this you can see what is installed on each computer, how many hours an employee uses each program each day, uninstall anything you don't want on the systems, and block them from doing things you don't want them to do.  With it you can remotely remove Administrative rights from all users and make them all standard users who cannot install software or anything they download except that which you provide thru the System Center authorized software that they can see in their configuration manager windows. It also manages the central  dissemination of software and updates, microsoft updates, and many other items.  There is a learning curve but it is the best solution to locking down an organization. I have used this in situations that require high security because of classified information and in situations where a company or university just wants total control over its employees.  And believe me, properly used this gives you total control over your network.

[LeetPirate]

Thank you all for your suggestions. I can see that some are of an opposing opinion and that's ok but when you are on the other side of the fence you would see things from another perspective and realise that corporate IT policies are a reality and they are there for a reason. The ironic thing is that the same people who are opposed to corporate policy enforce their own similar rules at their home when it's their money at play, for example you hire someone to paint your house and find them watching youtube half the day and not doing the work I am certain that you would reprimand this behaviour as any right thinking person would not accept this work ethic.

 

From an employee's perspective I want to listen to music and watch funny videos on facebook while hiding it from the boss so that I appear to be productive; from the employer's perspective I don't want company assets to be used for wasting time on facebook. And yes we all know there is no 100% protection from malware but saying it's impossible to do is myopic and bratty, most decent anti malware products can provide a 95% or greater probability of blocking malware and this is acceptable since 95% is much greater than 0%.  It's especially bad when employees are trying to do webinars or skype meetings and the video is of poor quality because some other employee decided to download torrents at work, this is just an example I saw happening at a company.

Thank you all for your suggestions. I will check them out.