Re: [SAGE] VPN solutions

[Philip Brown <phil@bolthole.com>]

On Mon, Nov 08, 2004 at 08:57:50PM +0100, Brad Knowles wrote:
> ....
> 	I'm not convinced of that.  The most recent attacks have included 
> code to turn off firewalls and other security software, and so long 
> as these are things that the users are capable of enabling or 
> disabling themselves, I think you always have to consider them to be 
> highly suspect.
>  ....
> 	Think of it like cooking Kosher, and having separate utensils, 
> cookware, maybe even entire kitchens.

I think the bottom line is, if a company is serious about employee
workstation VPN security at home, then need to provide an non-tamperable
(by the employee) laptop/workstation for the employee to use.