Answer for:

Quarantining laptops

Message 4 of 8

View entire thread
0 Votes

some of the enterprise level Antivirus solutions have quarantine capabilites. If a new client is added to the network, the AV will quarantine it until it meets the network requirements.

If this is an active directory domain, by design, if the laptop is not a member of the domain, it can not access resources on the domain. Even if the user tries to log on with their account. Active Directory requires a computer account for clients to be members of the domain, therefore there is some inherent quarantine.

Managed switches allow you to assign MAC addresses to a switch port. This security feature will disable the switch port if the wrong computer uses that switchport. You can also disable unused switchports.

Combined, these security features can be used to make sure unauthorized computers do not gain access to the network.