Re: [SAGE] VPN solutions

[Richard Chycoski <rac@cisco.com>]

Or hardware-based VPNs behind which to hide the laptop. And appropriate 
software to scan the machine and the network.

You can never assume that a machine is 'non-tamperable' when it is 
portable. You still have to guard against the ten year old son or 
daughter of the employee who precociously manages to get into the 
machine and connect to 'Kazaa' or whatever...

- Richard


Philip Brown wrote:

>On Mon, Nov 08, 2004 at 08:57:50PM +0100, Brad Knowles wrote:
>  
>
>>....
>>	I'm not convinced of that.  The most recent attacks have included 
>>code to turn off firewalls and other security software, and so long 
>>as these are things that the users are capable of enabling or 
>>disabling themselves, I think you always have to consider them to be 
>>highly suspect.
>> ....
>>	Think of it like cooking Kosher, and having separate utensils, 
>>cookware, maybe even entire kitchens.
>>    
>>
>
>I think the bottom line is, if a company is serious about employee
>workstation VPN security at home, then need to provide an non-tamperable
>(by the employee) laptop/workstation for the employee to use.
>  
>