VPN and Internet access

[Todd Wilburn]

I'm am the IT Technician for a company that is just starting to get a
network, server and VPN set up and going.  I got the job because I know the
most about computers and networks in the company, so we are learning as we
are going with VPN's.  Our router/firewall is a Shiva LAN Rover VPN Express
on a ADSL line.  We have 15 workstations, 3 remote workstations and 10
wireless vehicle workstations.

We need to tie in our vehicles, via wireless VPN, and remote stations, VIA
dialup ISP, into our server. We have experienced some problems with
employees, in the past, accessing the internet with their own ISP's. Our
management dealt with it by removing the modems.  I am concerned that once
our VPN is in place that they will begin "playing" on the internet when they
should be doing their work.  Most of the time our employees are unsupervised
and it is difficult to monitor their activities.  We are running Win 95/98
on all our work stations.  I have been unsuccessful in getting our
management to go to Winblows NT.

Does anyone know of a way to block internet access but still allow intranet
and VPN access?  I would prefer to control their internet access through our
firewall.

Thanks,
Todd Wilburn

VPN is sponsored by SecurityFocus.COM