The Channel logo

back to article Don't lose control of those fast-breeding endpoints

So you want to know about security? Well you have come to the right place. I have been here for a while and I can tell you that outside these gates it’s full of cowboys, sharks and pirates, none of whom will hesitate to take what is yours and call it their own. The above is is a quote from a brochure I wrote in an attempt to …

COMMENTS

This topic is closed for new posts.
Anonymous Coward

splendid isolation

What has helped us a lot is the use of switches that provide a port isolation feature of some sort. Vendors have many names for this functionality port based VLANs, asymmetric VLANs, L2 isolation, etc. but the key point is that the LAN ports to which PCs are connected are prevented from communicating with each other, but some ports can be set to exchange packets with any other port - these are used for servers, printers, internet links. Nowadays one can get suitable switches at around £80 ext VAT (24-port).

When wireless APs are used that support a "client isolation" feature, plugged into an isolated port on the switch, all client-to-client comms are blocked.

0
0
Silver badge

Excellent article

Excellent article. Fundamental and concise advice. These practices work day in and day out. You will never NOT have a breach, but instances can be held to a bare minimum and it can be contained very quickly if you follow these best practices.

0
0
This topic is closed for new posts.

Forums

Opinion

Andrew Cobley

If only lawyers could make money rather than costing money
Memristor_wafer

Chris Mellor

Execution warrant close to being signed for Fink's folly
Woman cuddles 'sly-looking' Fennec fox. Photo by Shutterstock
Cartoon of employee asking wky boss makes hium wear suspenders (while pincer through open trapdoor remains poised above his head) illustration by Cartoon resource for Shutterstock

Frank Jennings

It's not like my boss painstakingly nurtured the contacts, right?

Features

Wind turbine, image via Shutterstock
Girl and computer, photo via Shutterstock
Middle-class terror of engineering also part of problem
Nerd fail photo via Shutterstock