Solved

Safe Surfing from Regional Office?

Posted on 2014-04-24
3
367 Views
Last Modified: 2014-04-24
We have a WAN link from headquarters to a regional office.  

All internet surfing normally travels over the WAN to HQ, goes through our proxy ISA/GFI server where traffic is scanned. Downloading certain file types is blocked and we feel much safer having everyone surf through that proxy.

The regional office also has a cable modem so visitors can surf the internet via wifi.  
Our security policy prohibits connecting any of our traveling laptops to the LAN.

In the unlikely event that our WAN is down, we'd like to leverage the cable modem at the regional office to allow our LAN users to use OWA over the internet.

Though we briefly entertained buying some USB wireless adapters so the desktops could reach the internet via wifi if the WAN was down.  Our concern is that they would be less secure because the traffic would not be scanned by our proxy ISA / GFI server.  If someone got infected, they could infect other folks on the LAN.

QUESTION
--------------
What's the best option to provide emergency access to the internet without reducing our security?

One option, if it's possible might be to plug the cable modem into the WAN port of a cheap router, then configure the router to only allow access to our OWA site.  Then connect that somehow to our LAN.  Of course we'd need to have each client go into internet options and remove the reference to our proxy server.  When the emergency is over, we'd need to disconnect the temporary cable modem/router and have our clients enter the proxy server so they can surf the regular way.

Are there other options?  Are there any dedicated devices which block internet threats beyond what a traditional file-scanning anti-virus app might do?

Any thoughts would be very much appreciated,
Thanks,
Mike
0
Comment
Question by:mike2401
  • 2
3 Comments
 
LVL 9

Accepted Solution

by:
Beartlaoi earned 500 total points
ID: 40020309
Install a VPN and configure it to route all internet traffic through it rather than only providing access to the LAN.  This will also give your roaming associates the ability to stay in touch whereever they are.
0
 

Author Comment

by:mike2401
ID: 40020354
PERFECT!

If we get a VPN contraption to connect the regional office to HQ using the cable modem in the regional office, that would be a perfect solution for when the WAN is down.

In fact, that way, we don't need to fuss with changing client side proxy settings, and they would also have access to their files which are on the file server here in HQ.

A VPN over the public internet is a perfect solution, thank you!!!

Mike
0
 

Author Closing Comment

by:mike2401
ID: 40020357
AWESOME!  Thanks!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now