Securing conference rooms



We are wanting to give vendors internet access in our conference rooms but
we do not want them see or access anything on our network. We are not close
to the city so we do not have the abitlity to get cheap cable/dsl or
anything. What I was thinking of doing was getting a small sonicwall or
something simular and setting it up with a different ip scheme than our
network. Then plug in the data ports for vendors into that router with dhcp
enabled. I would then set the default gateway of the sonicwall to a
dedicated port on our firewall to allow internet, but not allow any access
to our internal network. I will try to show below

Vendor laptop 192.168.1.100 dhcp from sonicwall
Sonicwall lan 192.168.1.1
Sonicwall wan 10.10.10.2 gateway 10.10.10.1
Corp. firewall dedicated port 10.10.10.1

The corp firewall will allow internet access to them but not allow any
access to our corporate network. How does that look and are there any better
ways to accomplish this?


.



Relevant Pages

  • RE: One computer two different networks
    ... We have about 250 computers that are isolated in a high-security ... computers (one for the secure network, ... I think if you do grant internet access, your network would no longer be ...
    (Security-Basics)
  • Re: Sonicwall Pro issues
    ... reduce the network inactivity timeout setting on the ... >> Is there a problem witrh our setup or is it with Sonicwall. ... > W32.Welchia over a dial-up connection at home. ... > one of these little worms on your internal network. ...
    (comp.security.firewalls)
  • RE: Wide area failures?
    ... The W2003 server hosting the DNS server is not the system ... Sonicwall a FQDN, but I prefer they be invisible to outside queries. ... The Wireless network is mapped internally to another private netowork, ... the computers visible. ...
    (microsoft.public.windows.server.dns)
  • Network Planning
    ... I'm hoping for some advice on setting up our SBS 2003 Premium network. ... A couple of staff members also use wireless ... Internet access intended for use by clients and tenants. ...
    (microsoft.public.windows.server.sbs)
  • Re: LAN connection, but not shared internet connection
    ... the host can't ping it's own IP/IP name - it can ... > master browser has no thing to do with the internet access. ... You just setup a network and all ...
    (microsoft.public.win2000.networking)

Quantcast