The Stack Overflow podcast is back! Listen to an interview with our new CEO.
2 added tags
source | link

What's the common way to block users from accessing intranet?

Right now, whoever pluginplugs in a cable can access any intranet server freely,. I want to change this behavior. But given that we runsrun not only Windows machines but also Linux clients, I can't just use NAP to restrict DHCP access.

Here's my thought,thoughts:

  1. Perhaps all users should do a AD authentication before granting him network access. But that's not integrated with the router.
  2. Checked allowed MAC addresses from a white list. But the perpetrator could just listen for traffic then collect authorized MAC address and use them later.

What should I do now? Any mature product?

What's the common way to block users from accessing intranet?

Right now whoever plugin a cable can access any intranet server freely, I want to change this behavior. But given that we runs not only Windows machines but also Linux clients, I can't just use NAP to restrict DHCP access.

Here's my thought,

  1. Perhaps all users should do a AD authentication before granting him network access. But that's not integrated with the router.
  2. Checked allowed MAC addresses from a white list. But the perpetrator could just listen for traffic then collect authorized MAC address and use them later.

What should I do now? Any mature product?

What's the common way to block users from accessing intranet?

Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only Windows machines but also Linux clients, I can't just use NAP to restrict DHCP access.

Here's my thoughts:

  1. Perhaps all users should do a AD authentication before granting him network access. But that's not integrated with the router.
  2. Checked allowed MAC addresses from a white list. But the perpetrator could just listen for traffic then collect authorized MAC address and use them later.

What should I do now? Any mature product?

    Tweeted twitter.com/#!/StackSecurity/status/334535362150014977
1
source | link

Block unauthorized user from getting access to intranet

What's the common way to block users from accessing intranet?

Right now whoever plugin a cable can access any intranet server freely, I want to change this behavior. But given that we runs not only Windows machines but also Linux clients, I can't just use NAP to restrict DHCP access.

Here's my thought,

  1. Perhaps all users should do a AD authentication before granting him network access. But that's not integrated with the router.
  2. Checked allowed MAC addresses from a white list. But the perpetrator could just listen for traffic then collect authorized MAC address and use them later.

What should I do now? Any mature product?