RE: About MS-Networking security.

From: Depp, Dennis M. (deppdm_at_ornl.gov)
Date: 01/17/04

  • Next message: Harlan Carvey: "RE: About MS-Networking security." 
    Date: Fri, 16 Jan 2004 20:20:10 -0500
To: "Wronski, Michael C (MED)" <Michael.Wronski@med.ge.com>, Cyber Chiu` <cchiu@hotspur.com.hk>, focus-ms@securityfocus.com

    Microsoft has a solution where remote users are scanned and verified
    clean before they are allowed to create a remote session, either using
    VPN or dialup. Their solution is based on Windows Server 2003. I think
    Cisco may have a similar solution, at least they should. There may be
    others as well.

    Denny

    -----Original Message-----
    From: Wronski, Michael C (MED) [mailto:Michael.Wronski@med.ge.com]
    Sent: Thursday, January 15, 2004 5:22 PM
    To: 'Cyber Chiu`'; focus-ms@securityfocus.com
    Subject: RE: About MS-Networking security.

    This is a common problem with no single solution. No matter what you do,
    the
    mobile user is going to be a high risk entity. Education of the user of
    their ability to cause harm to their own data and the company network is
    a
    great start. They need to be aware that their actions can cause
    catastrophic
    results.
    After education, the following are the most important:

    -Install Personal Firewall and AV on all laptops and make sure you
    educate
    the users on the function of the software.
            -Lock down the configuration so it cant be disabled by the user
            -Enable aggressive live updates (daily) and scans (daily)

    -Patching Automation - Before your user leaves the network, their
    laptops
    should be patched with the more recent OS updates.

    -Its best of your laptop users can connect to a "sandbox" network on
    return
    to the office or if you can separate all physical connection that belong
    to
    mobile users on a sandbox VLAN. This can be difficult to manage
    depending on
    your current network design.

    -M

    -----Original Message-----
    From: Cyber Chiu` [mailto:cchiu@hotspur.com.hk]
    Sent: Sunday, January 11, 2004 3:26 PM
    To: focus-ms@securityfocus.com
    Subject: About MS-Networking security.

    Hi all, I have a question about portable computer security concern.
    My company have firewall protection, all desktop are behind firewall.
    However, My saleman need to do their business with a Laptop. When
    they're in
    office. They will connect their laptop to our internet.

    I think it's danger because we don't know it's infected by virus or not.
    can anyone suggest me what to do?

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Harlan Carvey: "RE: About MS-Networking security."

    Relevant Pages

    • Re: New Printer problem--Help please!
      ... I was able to successfully turn off all firewalls on the laptop, and I believe I also was successful with turning off all firewalls, virus protection, etc on the desktop. ... I have re-set up the network using the home network wizard. ... Following the suggestion I found elsewhere, I set up the network "wrong" (chose incorrect connection method), then set it up again "right". ... the presence of the Symantec VPN driver raises the possibility that the laptop has a Symantec firewall installed. ...
      (microsoft.public.windowsxp.print_fax)
    • Re: Printer sharing
      ... Then I have a laptop which connects wirelessly to the router. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ... If you need Pro's ability to set fine-grained permissions, turn off Simple File Sharing and create identical user accounts/passwords on all computers. ...
      (microsoft.public.windowsxp.general)
    • Re: simple solution!
      ... >To filter network access, use a software or hardware ... Sygate is a software firewall that will let you ... laptop a static IP ...
      (microsoft.public.security)
    • Re: File sharing - why is it so difficult?
      ... I am having the same file sharing symptoms as lots of other people though the usual solution of switching off firewalls, enabling Netbios or starting programmes sevices folder. ... I also have a laptop also running windows XP but running the free AVG anti-virus software. ... The strange thing is the laptop can ping the PC once the firewall has been turned off but it can't access any files through windows. ... They are both part of the same workgroup and if you view that workgroup in network places on the PC you can see the laptop and on the laptop you can only see the laptop. ...
      (microsoft.public.windowsxp.network_web)
    • Re: Simple networking?
      ... New laptop using XP Media Centre/SP2. ... I have turned off XP firewall on both since I'm using Zone ... Run the Network Setup Wizard on both computers, ... Simple File Sharing and create identical user ...
      (microsoft.public.windowsxp.general)
    Loading