5 ms·
I've seen this happen in a lot of industrial networks as well. At the end of the day the work needs to get done. If internet access is necessary for that, then
by willempienaar 10y ago
I've seen this happen in a lot of industrial networks as well. At the end of the day the work needs to get done. If internet access is necessary for that, then somebody will plug in a mobile router or phone to this "isolated" network. This is especially common when remote vendors and support teams need access to this network to troubleshoot issues.
So now instead of centrally designed and managed IT infrastructure and remote access, you have something like a Teamviewer service enabling remote access through these rogue gateways.
- xuki 10y agoThe proper way to do this is to have 2 machines, one connects to intranet and one connect to internet. The one connect to intranet won't accept any external devices, completely unable to connect to internet or even copy data out using thumbdrive. If cost is an issue, VM could work (but riskier).
- chmars 10y agoIsn't it annoying if you cannot transfer data from your Internet computer to your offline computer? And what's about cloud services?
- mseebach 10y agoThere will usually be a one-way file copy service (with AV scanner) that you can use to transfer files to the secure network. No access to cloud services is very much a feature, not a bug, as these measures are implemented for security.
- geofft 10y agoThe purpose of security is to help the business get its job done without disruption. If security were a goal in itself, you could just shut all the servers down and go home. If a "security" measure is causing disruption to the business, it's not doing its job.
- unethical_ban 10y agoIt's a spectrum. Business would be a lot easier for DBAs if there were no firewalls between PCI (credit card) data and their applications, but we do it because it mitigates risk.
- geofft 10y agoDBAs as in database admins? I'm talking about the business goals of the company as a whole, not for individual employees / departments. The reason you want to mitigate risk is because you want the company to get its business done (i.e., you want customers to be willing to give you money). I don't think there's any spectrum here. Good security is what helps the company's business goals. Bad security (which isn't really security) hurts it. Sometimes there are legitimate questions about whether to optimize for short-term or long-term goals, but that's no different for every other business decision a company makes.
- marcosdumay 10y agoThis is only usable on tasks that do not require you to publish the result of the work. That normally covers all high security work, but 99% of the work of a government is communicating with the public, on both directions.
- jarman 10y ago>cloud services If service is required for work - it should on corporate network.
- Fuxy 10y agoMore interestingly this will probably result in all the Intranet computers being severely behind on security updates and becoming easier to hack. Plus how will government internet services be able to access data on the Intranet and vice versa. I suspect at some point the will end up with computers connected to both networks and those will need to be constantly monitored and kept secure. At the end of the day if they offer any internet based services to their citizens that data needs to make its way back to the Intranet somehow.
- chmars 10y agoIsn't it annoying if you cannot transfer data from your Internet computer to your offline computer? And what's about cloud services?
- angry_octet 10y agoSounds like a good way to get fired and possibly charged under the CFAA.