I am working in vocational school as IT engineer.
I have task to implement solution to effectively block certain or illegal websites, log unblocked traffic, store logs for 6 months.
I am thinking about proxy with authentication for BYOD via AD users and SSO for PC's connected to Windows Domain, so logs would include not only local IP and remote IP's, but also username to identify user.
- No fiddling around with client side devices (school PC's and students devices)
- No SSL errors or something like that.
- Free - opensource.
Now we are using pfsense and Windows Server 2008 R2, and CentOS for intranet/apache reverse proxy.
We are legally authorized and required to collect logs about users browsing history, block illegal websites (betting, movies, porn, etc.)
We don't need to tamper with SSL certificates, purely log remote/local IP's and users browsing history.