Solved

Virus protection on guest laptops

Posted on 2014-11-23
5
196 Views
Last Modified: 2014-12-03
We have antivirus on our computers on our LAN.  However, we have guest laptops that connect to our network.  Is there any way to protect our network from infected laptops that hook up to our guest internet?
0
Comment
Question by:al4629740
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 12

Expert Comment

by:andreas
ID: 40461450
You might not allow thr guest Laptops to ANY Lan port of your network. I would suggest to set up a seperate LAN for the laptops and marking the LAN ports in the rooms accordingly.

This Laptop-LAN needs to be seperated by firewall rules from your work-LAN. Best is to only allow internet for the guest-LAN via Proxies for the protocols needed.

If you connect the laptops into your current  LAN its not possible to protect you from all issues the laptops might bring.
1. There might be new malware NO AV-scanner is able to detect now.
2. The laptops might try to divert traffic via arp-spoofing to perform man in the middle attacks.
3. The laptops might run own DHCP and DNS -servers to distribute false network configs, could be used for man in the middle too.
4. Laptops might start to brute force account passwords. In coorportate LANs the PCs usually trust the other PCs in the same lan and the windows firewall wont block login attempts.
0
 

Author Comment

by:al4629740
ID: 40462016
What about putting them behind another separate router?
0
 
LVL 12

Expert Comment

by:andreas
ID: 40462933
Would be possible IF the 2nd router blocks access to the IPs in the 1st subnet that is located on its WAN side. just route packets out and in to the internet but block the access to the subnet that your first router has as the LAN.
0
 

Author Comment

by:al4629740
ID: 40464685
Yes.  If that is the case, would that secure against most threats?
0
 
LVL 12

Accepted Solution

by:
andreas earned 500 total points
ID: 40465211
it would offer a good level of protection. But if you install proxy servers, as I suggested in my first post(that proxy only the protocols you want to allow for guests) the protection would be much more high.

Mark there is no 100% secure system. Holes might always be there (e.g. in the 2nd router you want to put) and thus the internal network can again attack your work environment.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
do i need anti virus software with windows 10? 13 96
switch design question 6 47
Windows Folder Permissions 9 120
Domain Administrator locked out "Again" 7 76
This subject  of securing wireless devices conjures up visions of your PC or mobile phone connecting to the Internet through some hotspot at Starbucks. But it is so much more than that. Let’s look at the facts: devices#sthash.eoFY7dic.
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question