We help IT Professionals succeed at work.

Viruses Protection Issue

swpui
swpui asked
on
If you have clients that VPN into your LAN from outside or users that use thumbdrive and some of them even bring in their own notebook and plug in the LAN cable to connect to your LAN, how to have a secure scan for this type of environments? Although currently I have a Trendmicro installed in the workstation, is ther a way when anyone plug into my LAN trendmicro will auto install and scan their notebook before they can use? Is there a way where I can block outsider from simply plug into my LAN without my authorisation even they had known which ip? How to block the unuse ip so that although it was not occupied but it can't be used by anyone with my authorisation?
Comment
Watch Question

CERTIFIED EXPERT
Most Valuable Expert 2015
Commented:
For those who VPN in you should have setup the PC in the first place with all the apps you need installed etc. Those should be safe. Set up your PC's so that USB sticks are scanned when attached to a PC.

For guests with notebooks only allow them to connect them in a controlled "Guest" Room where the LAN doesn't have direct access to the company's LAN, but rather only have access to the internet and maybe certain printers. It's probably easier to do this with wireless connections than with ethernet, also, who would want to connect via cable if he can use wireless?

If you have external contractors who need to connect to your LAN, then lend them a PC with your software installed, and if he needs additional tools those would have to be OK'd by your company.

Author

Commented:
if userA all the while was using my LAN with the company's notebook which I installed antivirus/firewall....etc but 1 day without my notice he bring his own notebook and plug into my LAN with the ip that I use to set in the company's notebook that he is using, how to prevent this type of case???
CERTIFIED EXPERT
Most Valuable Expert 2015

Commented:
I don't understand what you mean. If you follow what I posted earlier there should be no problems at all.

Author

Commented:
let say I'd set this ip 192.168.2.15 in the company's notebook which used by UserA to connect to my LAN. 1 day UserA silently bring his own notebook, set the same ip and connected to my LAN in order to access internet or whatsover (my office do not have wireless facility for staff), how do I prevent this? Rindi, Hope you get clear with my xplaination. Thanks.
CERTIFIED EXPERT
Most Valuable Expert 2015

Commented:
Only allow users to either use PC's setup by you when in the company, or then only allow them to use their own PC's in a controlled environment where they don't have access to the Company's LAN. You need agreements that the users and guests sign so you can take action against those that don't adhere to that agreement. Put this agreement together with the help of an attorney so it is legal.
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Author

Commented:
I would prefer to have recommendation of either software/appliances/config to limit the usage of users.....etc.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.