General Discussion - Is it possible?

Author

Is it possible?

mharoun

2004-12-25, 8:04 pm

Hi geeks!

Wonder if someone can help with this networking question.

At my work, we are searching the best security practice to stop anyone from connecting his computer to the network unless it meets certain security measures (has patchlink installed – Corporate Virus scanner – etc.). We get visitors to our place frequently and we want to ensure that no computer will be able to connect to the network unless it’s scanned and patched.

Is there is any SW/HW solutions out there that can assure this?

If I'm posting my question at the wrong place, please advice.

Any thoughts? Let me know if any additional info will help.

Thanks and happy Holidays!

mharoun

Dude

2004-12-29, 5:36 am

Forget the software, buy a cisco switch with an enterprise IOS on it and configure port security. That way, you dont have to worry about outsiders at all because they just wont be able to get on.

sandy7000

2004-12-29, 2:29 pm

Using a pippin instead of a tower could keep control of the software on the server.

AFAIK, Pippins are like a diskless workstation, so you don't really have to worry about software installed individually.

If an unpatched, infected laptop is plugged into the network, correct security permissions on the server could protect the network.

http://www.theapplecollection.com/d...oto/Pippin.html

I've only heard of them installed in Japan. I guess they're cheaper than a full workstation, so AFAIK they're banned in the U.S.

I'm not the best authority on these areas, so this is just a thought.

curiousgeorge

2005-01-02, 12:00 am

A visitor wouldn't have corporate software installed on their system, so you can't accomplish your goal.

However, if these visitors are using corporate computers, just use SMS.

SMS allows you to take inventory of programs and patches that are installed on all computers on the network. You can deploy applications and patches to any computers that need it.

Hope that helps.

Sponsored Links