RE: About MS-Networking security.

From: Wronski, Michael C (MED) (Michael.Wronski_at_med.ge.com)
Date: 01/15/04

  • Next message: Kevin E. Casey: "RE: Encrypt data - SQL Server 2000"
    To: "'Cyber Chiu`'" <cchiu@hotspur.com.hk>, focus-ms@securityfocus.com
    Date: Thu, 15 Jan 2004 16:21:38 -0600
    
    

    This is a common problem with no single solution. No matter what you do, the
    mobile user is going to be a high risk entity. Education of the user of
    their ability to cause harm to their own data and the company network is a
    great start. They need to be aware that their actions can cause catastrophic
    results.
    After education, the following are the most important:

    -Install Personal Firewall and AV on all laptops and make sure you educate
    the users on the function of the software.
            -Lock down the configuration so it cant be disabled by the user
            -Enable aggressive live updates (daily) and scans (daily)

    -Patching Automation - Before your user leaves the network, their laptops
    should be patched with the more recent OS updates.

    -Its best of your laptop users can connect to a "sandbox" network on return
    to the office or if you can separate all physical connection that belong to
    mobile users on a sandbox VLAN. This can be difficult to manage depending on
    your current network design.

    -M

    -----Original Message-----
    From: Cyber Chiu` [mailto:cchiu@hotspur.com.hk]
    Sent: Sunday, January 11, 2004 3:26 PM
    To: focus-ms@securityfocus.com
    Subject: About MS-Networking security.

    Hi all, I have a question about portable computer security concern.
    My company have firewall protection, all desktop are behind firewall.
    However, My saleman need to do their business with a Laptop. When they're in
    office. They will connect their laptop to our internet.

    I think it's danger because we don't know it's infected by virus or not.
    can anyone suggest me what to do?

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: Kevin E. Casey: "RE: Encrypt data - SQL Server 2000"

    Relevant Pages

    • RE: About MS-Networking security.
      ... network is a great start. ... After education, ... company have firewall protection, ... My saleman need to do their business with a Laptop. ...
      (Focus-Microsoft)
    • RE: About MS-Networking security.
      ... Network Engineer ... Education of the ... My company have firewall protection, ... My saleman need to do their business with a Laptop. ...
      (Focus-Microsoft)
    • Re: One Users My Documents no longer redirected.
      ... even connect to the network at all because it's a PITA. ... So I would think that a wireless 54 mbps connection would be ... one laptop, and try it for a day or two to see what happens. ... active directory OU as the other users whose redirection works? ...
      (microsoft.public.windows.server.sbs)
    • Re: Problem with XP Pro and Home in same Network
      ... the network can be accessed successfully from within My Network Places. ... the laptop is the mb, the laptop can access the network from within My ... Network Places, but the desktops cannot. ... wireless computer never be a server, and certainly not a browser. ...
      (microsoft.public.windowsxp.network_web)
    • RE: The VA Stolen Laptop - Lessons Learned
      ... disabled reaches the laptop? ... make a lot more sense when data is housed on the "work" network and NTFS ... Encrypt it with whatever you like... ... the machine or the user couldn't get to their profile off the network. ...
      (Security-Basics)