it's important to balance. security system should be designed to support business rather than the other way around. if remote access will help business, then secure the remote system :)
we tend to implement ssl vpn rather than secureclient due to ease of use in user's part. secure workspace is taking care of the data protection (no data allowed to be taken to remote laptop / pc). rgds, Ali HS On Tue, May 6, 2008 at 5:32 AM, Ray <[EMAIL PROTECTED]> wrote: > We never permit home computers. If the manager wants their employee to have > remote access, they need to believe the value achieved is worth the price of > a laptop. > > ALL employees, IT included, are restricted users. No local admins and no > power users. People who need to install software have two domain accounts, > their regular restricted one and another that is a local admin that they can > use with RunAs to install software. > > Make darn sure you encrypt the laptops, which may be mandatory depending on > your industry. If it's only a few people consider TrueCrypt from > www.truecrypt.org. > > Ray > > > Date: Mon, 5 May 2008 15:00:34 -0700 > > From: [EMAIL PROTECTED] > > Subject: [FW-1] Remote Access with SecureClient > > To: [email protected] > > > > > > We are just now starting to implement a remote access for some of our > > user community. I do not fully understand the risks to our internal > > network. I am wondering what most companys do in regards to, do they > > let their users connect from their own personal computers, or does the > > company usually supply a computer for remote access use. > > > > > > > > Thanks > > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
