1. Making sure users access all files from the server

2.Local disks are denied access(forced to work only on network drives)

3.Disabling mass storage

4.Implementing IPSec to block users from communicating with any other IP except the server IP and Firewall(cyberoam)

5.Blocking as much sites as possible in cyberoam like file storage sites,mails etc.

1.Ultrasurf

2.Proxy sites

3.And the biggest problem of them all, using android phones internet via mobile tethering to bypass cyberoam.