To prevent leakage of confidential information in an organization such as an enterprise without generating troubles in normal business using an external network.

An access state monitor-control apparatus 10 comprises: a transmission data acquisition means 14 for acquiring transmission data before transmitting the data from a terminal apparatus 31 in a LAN 30 to the external network 50 via a network repeating means 40; a site determination means 15 for determining whether an access destination site included in the transmission data is a permitted site or a limited site which is stored in a site information storage part 11 or an unregistered site which is not registered yet in the site information storage part 11; a limited site transmission condition determination means 16; and an unregistered site transmission condition determination means 17. When the site is a permitted site, the transmission of the transmission data is uniformly permitted, and when the site is a limited site or an unregistered site, whether the transmission is to be limited or not is determined respectively based on a reference for limited sites or a reference for unregistered sites.