I've got an interesting dilemma. I have a large (50+ users) office that is going to be on the campus of a local university. The purpose is to foster collaboration, etc, but the open environment is going to play merry hell with my network security.
Basically, I have physical security on my demark/server room, and that's it. Worse, all the computers will have WAN access, so the security issues aren't limited to the local office, but to the entire (huge) company.
I'm tightening things up as much as possible. All machines are bound by MAC, the WAN access is restricted as far as it can be, etc, and I'm doing a few tricksy things, like doing automated OS/hardware probes to watch for MAC cloning.
Still, I'm a bit worried. Lack of physical security is freaking me out. What would you guys recommend?