Small business - Web monitoring

[Snowreap]

not directly answering your question, but: at my wife's workplace they don't do web monitoring. Internet traffic from the 'work' computers is simply blocked outright, unless the site is on a 'whitelist' of work-related sites (including sites needed for Windows and Anti-Virus updates). non-work traffic is limited to a couple of 'public' computers in the break / conference room, and wireless is open if people want to use their own mobile phones or tablets.

as a result, there's not really anything to monitor, and nobody needs to be troubled to review any logs. periodically my wife will be asked to add additional entries to the 'whitelist' on the router (an old otherwise obsolete PC with an extra NIC installed, running stock OpenBSD and no extra software). the obvious downside with this option is the need for somebody who can navigate a Unix command line and who knows how to use 'vi' or 'emacs'. the upside is that the solution required no cash outlay at all (the PC would have been thrown away otherwise, and they happened to have an extra NIC on hand (probably scavenged from another old PC before it got thrown away)).

-ken