A client has about 25 PCs on a LAN with an NT4 server. The server acts as the gateway to the Internet. It's running an old version of WinRoute Pro (originally, tinyurl.com, now Kerio) to limit outgoing Web access to only certain internal IPs (i.e. only some LAN workstations are able to access the Web). All LAN workstations have fixed IP addresses.

They did this originally believing it would improve productivity. However, they have now found that everyone needs occasional Web access for work-related functions. They are now thinking to make Web access available to everyone. However, they want to monitor Web use to spot any excessive or non-work-related usage.

At this point I'm thinking something like a SysLog product for Windows would do the job. Products like the Kiwi Syslog Daemon and WinSysLog are possibilities. However, most important would be log file analysis for the chosen product. It should be easy enough for an end-user to use and be capable of generating ad-hoc reports.

Can anyone make any recommendations to fill these needs? TIA.