Setting up a secure network so that employees don't steal company data

Hello,

I have a small company and one of our employees just left the company and while leaving he stole most company data and gave it to our competitors.

It's high time I get a secure system.

I plan on setting up a server through which all internet access will be directed so that I can block certain websites but I don't know which software / settings to use.

Also, I want a software that would log everything.
Like if an employee starts his system, I should get a notification on that server or an email on a separate email that the system has been turned on.
Or if an employee copies a file on his pen drive, I should get some kind of notification.

Please help.

Without knowing your small company's IT infrastructure...

For controlling/monitoring Internet access, you'll need a proxy server like WinGate. There are others that may fit your needs/infrastructure better...

For monitoring/logging everything on the desktop/server is a tall order. There are solutions that come close to your requirements, but cost of these solutions might be cost prohibitive for your small company. I've implemented Safend Protect in a corporate setting and it pretty much meets your requirements. There had been a number of funny stories related to this solution, but I am zipping it...

Alternatively, you could just disable USB ports with either local, AD GPO...

This is probably outside of the scope of this forum.

There are many endpoint security/data loss prevention solutions out there. But which one will work for you depends on a variety of factors, such as your budget, the number of devices/employees, the nature of the data you're trying to protect, the type of threats you're facing, the acceptable usability/performance impact, the type of network access the devices have, the level of management you require, and so on.

I'd consider hiring an IT security consultant if my data were that important.

That is a considerably large undertaking. Just what I can think of off the top of my head.
You would need the following

• Restrict or block access to usb and cd/dvd storage devices to prevent data from being copied off
• Block or restrict access to personal email and file sharing sites
• DLP system in-line with company email to block company data from being exfiltrated
• Some how handle printed material
• Manage any mobile devices and enforce encryption and remote wiping capabilities for company devices