said operational data comprises an IP address of a remote party of a connection with said computer network, and a domain name associated with said IP address;

said enterprise data comprises user registration information maintained by a provider of network connectivity to a remote use of an Internet connection; and said at least one processor is further operative to:

correlate said operational data with said enterprise data to obtain correlated data by checking that said domain name displayed to a local party of said connection matches said user registration information; and

use said correlated data to improve security of said computer network by displaying an alert to said local party of said connection based on an outcome of said correlating step.