Ok, maybe someone can give me an outside perspective on this because i have no clue at this moment what could be happening anyways...

We have a user this user is constantly viewing webpages online instead of doing the normal daily operations well that part is ok we would generate a report showing activity of that ip address now here is the funny part is we show no activity what so ever!
This user is not very technically savvy so.. i am ruling out the part of them using some sort of proxy server bypass. we also verified wireless access which is a seperate line available to outside clients I do not see the mac address show up on the wireless router at all.

What can be allowing this user to do this? I am totally baffled.

so what u mean is we have someone that keeps on lookin at webpages on kps forum but does nothing?

i am talking about where i work ahhaha

lol o i c srry so u work in computers?

yeah.. and i found the answer sort of the user is somehow creating a tunnel to her home pc.

sounds like a work from home program

many ways to do this btw, ssh tunneling, paid programs that tunnel to externals sources, simple home computer based proxy....

VPN

Was going to say that. Its very simple to do such a thing.



"Most" company firewalls and port blocking software (websense and such) dont autoblock VPN ports because administrators use that crap.

Lucky for me, 99% of the people on my network at work, are total morons and have no idea you can do such a thing

If you want to catch him in the act, I think that you should put a keylogger on his computer while he is at lunch and something and not tell him about it and keep it on there for like a month.

most company contracts and IS eulas dont specify such measures and hence make it illegal to use such infringing devices. I would consult with legal dept. before doing this.