Is
there some requirement that the peope/devices in the test labs be able to access
the production network? Would a firewall between the two
help?
-gil
-----Original Message-----
From: deji Agba [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003 6:17 PM
To: [EMAIL PROTECTED]
Subject: VERY OT: Preventing Viruses from Lab to Live network
From: deji Agba [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003 6:17 PM
To: [EMAIL PROTECTED]
Subject: VERY OT: Preventing Viruses from Lab to Live network
I'm sure this does not have much bearing on AD, per se. So, I apologize for sending it to this forum that has one of the best collection of brains I've ever seen.I have some Engineering Testing Labs with a number of Domains and computers sharing the same network with my LIVE domain. It's actually worse than just sharing, but that's another story. Business requirements prevent some clients on these domains from installing AV clients, updating patches or even having passwords for the local admin password. Yeah, I know, but, again, another story entirely. But, as you can deduce, Viruses happen in these Labs.My question is this. How do you protect your Production networks from settings like these? All production systems follow strict adherence to strict security practices, but we occasionally have slippage (like someone on a month-long vacation turning off a computer and thereby not getting patches and AV pattern updates). How do you PREVENT share-eating Viruses like Mofei, Nachi, etc from spreading from the Lab to your live network? I have been evaluating a Product called Fortigate (from Fortinet), but I gave it up as soon as I discovered that they do not protect against NetBIOS, share-borne Viruses.Any product there that can help me out?Sincerely,
Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
