Security Basics mailing list archives

Re: stick a laptop to a LAN


From: Steven Meyer <meysteven () gmail com>
Date: Wed, 25 Jan 2006 18:54:43 +0100

Waw! Thanks guys!
There have been a lot of great answers in witch I'll have to dig in.
But if using 802.1x allows me to guaranty that the laptop won't be
able to connect to a other network, then I imagine that it could be
the best idea and adding a RJ45-LOCK  would just to make it more sure.
My home network is with a windows 2003 server , with active directory,
dhcp server etc. and all the station are Windows xp pro.
Thanks for all your help, It is really a great list
Steven Meyer


2006/1/23, Vijay Souri <vijay.souri () gmail com>:
hey,

Depends on how your internal network is one suggestion would be to have your
secure network on a specific subnet and confisure your network card to a
static IP address from the subnet this way you will not be able to connect
to most other networks which are on different subnets

vj


On 1/23/06, insecure <insecure () yandex ru> wrote:

Hi everyone,
We already had a few discussions about preventing laptop to connect to
our secured network.
My question would be the exact opposite: we have a secured network
with one laptop for external presentations.The only way to to put
anything on the laptop is threw the network (CD ROM, usb, diskette
etc. are disabled). But the real problem is how to protect the laptop
from being connected to a other network and be infected with spyware,
virus etc... and even worse having some of our data going threw other
LANs.
how could I be sure that the laptop will ONLY be able to connect to
our LAN and not any other.
Thanks for any help or hints.
Steven Meyer

Probably you have to create some kind of boot-cd with different
antispyware, virusscan, IDS tools enabled for private use. This way you will
boot every time with clean OS. Restrict access to the laptop, copy secret
data to the disk only when it's needed and remove it immediatly after using
(for presentation).
Just my thoughts...

--
Roman Shirokov
Systems Administrator
85A4 8586 FEEE 171B D0F1  A9C1 27C8 A907 EE45 7D0E

http://www.securitybox.vlz.ru
Making the roads safe...




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus

---------------------------------------------------------------------------





Current thread: