Desktop

Ask something
Question Locked

locking down a network

0 helpful
4 replies

by gtechstuff

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like to keep people within our corporate network from accessing their computers from home. Can anyone give me any advice on how to go about doing that? Our execs are concerned about sensitive data being copied to an employees home computer. We are currently using a checkpoint firewall. So what ports can I block etc?

4 replies

by dspeacock

The easiest way (and the correct answer on the CISSP exam) is to adopt the "that which is not expressly permitted is denied" principle. Close ALL ports and then open up only those that are absolutely required.

by sbrown95

I would have to agree with dpeacock on that one. If the above is too complicated, you could just block all outbound to 3398 (the default remote desktop port) but that can easily be changed. A great and easy way to resolve this issue would be to implement a proxy server as Remote Desktop does not work through a proxy.

by toivo talikka

Some thoughts about security:

Have the confidentiality agreements and internet/email policy agreements been signed by key employees with access to intellectual property and commercial secrets?

Have you also banned diskette drives, CD burners and USB memory sticks? Does your company monitor the outgoing emails, especially the attachments, use of webmail?

Electronic cameras, iPODs and such like may also need to be confiscated by your corporation.

And, last but not least, loose lips sink ships...

This discussion is closed to new replies.