Secure vendor machine on network

From: JSH (fleischmanj_at_hotmail.com)
Date: 09/30/04


Date: 30 Sep 2004 06:32:06 -0700

Looking for ideas on how to secure a vendor's machine on our network.
We have no control over the security settings on this machine, nor the
ability to install patches, virus software or software firewalls. It
needs to be on our network and accessible through a share.
Some ideas presented have been:
(1.) Isolate it on it's own VLAN (2.) Limit the hosts it can
communicate with to one "interim" machine we would place on the
network through the firewall and allow users to access that machine
for sharing files (3.) Purchase a security appliance to place between
the vendor machine and our network.
My concerns are in patch management and virus definition.
Has anyone run into this or have other suggestions for securing the
presence of an "un-managed" machine?

Thanks!
JSH



Relevant Pages

  • SecurityFocus Microsoft Newsletter #50
    ... Subject: SecurityFocus Microsoft Newsletter #50 ... Specialist in Microsoft's Security Services Partner Program, ... Network Monitoring for Intrusion Detection ... Relevant URL: ...
    (Focus-Microsoft)
  • Re: << SBS News of the week - Sept 26 >>
    ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)
  • Re: << SBS News of the week - Sept 26 >>
    ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
    (microsoft.public.windows.server.sbs)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)