Printable View
We have many laptops in our company which are used by our employees. Our boss wants to keep these laptops safe and security so that are unable to log on some other network when they are not present in the company. The employees should be able to connect only through our VPN when they are not present physically. Thus VPN is the only feature where employees are able to connect when they are at home or via some other network connections. Are there any software’s or some ways to perform this?
An organization should provide laptops as similar as their desktop counterparts that should be outfitted with firewalls and some antiviral software’s. These software’s should be up-to-date i.e. they should update regularly with latest security patches. For authentication purpose if you are using Active directory then the laptops can be locked down by means of group policy objects, like the computers which are connected to the network.
A laptop should never be left unattended. If you've got, for whatever reason, turn off the laptop and take it with you. Unattended laptops have been targeted by thieves in airport lounges and Starbucks. If you want to leave your laptop, use a good lock. The Targus Defcon SCL Cable Lock Inc. is specifically designed for laptops. It consists of a cable with a mixture lock that plugs into the lock port of any laptop. The cable can be used to lock the laptop to a table, if you have to get away for a minute. Other physical security measures for laptops include books in briefcases instead of bland laptop bags, especially those with large logo of the manufacturer of the laptop. Another thing to consider is shoulder surfing. Using laptop in a public place often able people to see everything you're doing. Try to work away from the crowds in an isolated area as an empty gate at an airport or a table facing a wall - not a window - in a cafeteria. Privacy filters guard against unwanted wandering eyes. Privacy filters are screens that attach to a laptop monitor with adhesive tape. Only someone looking directly at the screen you can see, but for others it is dark.
Administrative controls are one of the most excellent inventory systems used to keep track of the one who has a company laptop, and what they are doing with it. Each employee is allowed a laptop should be forced out, if administered for temporary or long term. The laptop brand, model and serial number must be registered with the name and signature of employee using it. Records must be kept by your IT staff, which is likely to issue management and keeping your company's laptops.
You can also try some technical controls. Technical controls include encryption, firewalls and antivirus software and virtual private network (VPN). In addition, all laptops should have a standard build and is required to authenticate the network as any workstation. In fact, looking at a laptop as an extension of your corporate network, not something separate from it. Encryption is very important for making data on the laptop which does not fall into the wrong hands, if the laptop is lost or stolen. Full disk encryption makes the laptop unusable for anyone who does not have the encryption key. Even if the disk is laid out of the machine and installed on a test, the data is gibberish.