Re: [SAGE] VPN solutions

[Philip Brown <phil@bolthole.com>]

On Mon, Nov 29, 2004 at 05:15:44PM -0800, Richard Chycoski wrote:
> Or hardware-based VPNs behind which to hide the laptop. And appropriate 
> software to scan the machine and the network.
> 
> You can never assume that a machine is 'non-tamperable' when it is 
> portable. You still have to guard against the ten year old son or 
> daughter of the employee who precociously manages to get into the 
> machine and connect to 'Kazaa' or whatever...
> 

The people who provide the "non-tamperable" box, need to understand the
requirements, and be competant.
If a "10 year old son or daughter" manages to get into it, then at least
one of the two things I mentioned has failed to be met.



> >I think the bottom line is, if a company is serious about employee
> >workstation VPN security at home, then need to provide an non-tamperable
> >(by the employee) laptop/workstation for the employee to use.