Laptops on the Company Network

[cyberspace]

I read regularly that care must be taken when using Laptops on the company network.

I need to update 3 machines, and from what I can see, none have antivirus.

Is it sufficient to just put them on a seperate network,eg. 192.168.3.x as opposed to the 192.168.1.x network that the PC's are on?

Any other tips for this matter?

Thanks

 

[mkirros]

It's not clear from you original post if these are company-owned laptops. If they are, I see no reason why you shouldn't install current anti-virus software (and some sort of spyware checker) and scan them thoroughly. Also, if they're company laptops they should go back in to you (or some IT person) on a regular basis to be updated and scanned.

If they're not company-owned laptops, I'd keep them away from the network if possibe. We don't allow any personally-owned laptops on our network.

 

[TrojanWarBlade]

I think that assuming a configuration will protect everyone is a bad idea. Just because you've configured a different metmask, doesn't meant that malicious code can't access anything else on the network.


Trojan.

 

[NortonES2]

We provide an ADSL line for visitors to use if they require Internet access, there is no way we allow them onto the LAN.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[SimonDavies]

I for one wouldn't stick unprotected laptops onto my network even if on seperate subnets.

If you need to update these machines to have AV and latest def files then my suggestion would be to have a cd handy with your client and defs already made (for instance you can create an installation of Norton\Symantec AV with the latest def files and install it). I would also look at running things like Mcafee Stinger on the machines and getting Adaware personal with uptodate defs and run a scan with that as well.

Only when you know the machines are clean of virus' and spy\malware and protected from them would I allow them onto my network.

SimonD.
MCSE NT4, MCSE\MCSA 2003, MCSE\MCSA 2003:Security, CNA3.12\IntraNetware, CNE IntraNetware, CCNA and Security+

The real world is not about exam scores, it's about ability.

 

[cyberspace]

I took the actions you suggested there, just installed copies of AVG and Micsoft Anti Spyware before adding them to the network, then once everything was clean, put them on, on a different subnet.

Cheers for the advice