Re: General Question--Sys Admins

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Ken Lynch (klynch_at_keller.nospam.nb.net)
Date: 08/27/04


Date: Fri, 27 Aug 2004 14:48:50 -0400

It is our policy that only company owned PCs may access the network either
via VPN or direct connections. This allows me to have complete say in what
AV is running and in making sure it is configured. I have all PCs managed
by Symantec's Control Console and the updates are pushed to the laptops when
they log back in. The users cannot modify the settings, so they can't turn
off virus protection when they are off the network.

"GG" <anonymous@discussions.microsoft.com> wrote in message
news:0cd701c48b99$e321b230$a501280a@phx.gbl...
>I have several remote users who dial into our corporate
> server via a vpn connection. I have at different times
> found virus's on their machines and have preached to them
> about keeping their virus defs. updated. I am concerned
> that they are going to at some point upload an infected
> file to my server. I was wondering how other admins were
> dealing with this type of issue. I do have a decent AV
> solution running on the server but am concerned an
> infected file uploded externally may not be found until a
> virus scan has been done thus leaving us a bit vulnerable.
>
> Appreciate any feedback.
>
> Thanks



Relevant Pages

  • Re: Sharing data between two home PCs
    ... VPN secures the communication between your machines. ... Tim wrote: ... > I have two PCs, each one is at a different location. ... > How can I network the two PCs so they can share data? ...
    (comp.os.linux.networking)
  • Leased Line to be replaced by VPN
    ... I have plans to replace a leased line on our network with a broadnband VPN, ... Currently this goes between a site with about 4 PCs and the main site. ... set up a permanent VPN connection between 2 routers? ...
    (microsoft.public.windows.server.networking)
  • Re: Joining a network
    ... > his network, We are trying to link my computer into this network over the ... And the answer is: use VPN. ... your PC to his network of PCs allows his net's resources to be shared with ...
    (microsoft.public.windowsxp.network_web)
  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
    ... This set of steps is redundant in many places, and it's also enormously expensive, since you're using no less than three different expensive bits of networking hardware (AP, PIX, VPN Concentrator), in addition to a bunch of x86 server hardware, windows server licenses, and at least one ISA license. ... Your computers necessarily don't have full access to your network infrastructure when they aren't logged on, so GPOs, software updates, etc can't be applied at the times you want them to be applied. ... Turning on, enabling, and implementing every possible security setting and device you think of is not defence in depth, and will probably only have two effects - your users won't use your wireless network, and you'll burn so much cash you won't have any left to spend on *useful* security measures. ...
    (Full-Disclosure)
  • TidBITS#792/15-Aug-05
    ... We also note the release of Security Update 2005-007, ... Macintosh FTP client, free for educational and charitable use. ... mentioned virtual private network (VPN) technologies. ...
    (comp.sys.mac.digest)