4 ms·
In our company, if they detect more than one MAC address behind a corporate switch port, they shut down the port. I don't know the exact rules, but I know, it d
by _trampeltier 5y ago
In our company, if they detect more than one MAC address behind a corporate switch port, they shut down the port. I don't know the exact rules, but I know, it does not need much to trigger to lock the port.
- tyingq 5y agoI've seen that, but it's a losing battle. People will unplug company IP phones and plug in their thing instead. Or use any number of other user-space networking, wifi sharing, etc, tools. Eventually you end up having to whitelist every legit MAC addr. Even that isn't safe, since I can spoof the MAC of anything I just unplugged, and many of them have helpful labels on them. So now you have to deploy certificates, and exceptions for things that don't support them. I imagine bad actors recognize which sorts of devices don't support certificates, so they would know what to unplug and spoof. Ugh. Just treat the office network as untrusted and be done with it. That's how every "WFH" worker is coming into your network anyway.
- culopatin 5y agoI don’t know if it’s a losing battle. That doesn’t happen at my workplace because they tell you day 1 that your employment is at risk if you do that. We can’t even plug in usb devices other than mouse dongles and approved printers. No charging phones, no flash drives(only certain approved devices that few people have). I’m in IT and I never encounter people going rogue.
- tyingq 5y agoI wouldn't trust "threat of being fired" to work universally across thousands of people though. People are strange.
- _trampeltier 5y agoEven WFH users have to use an company notebook. If you let use the user with to work with there home PCs, then yes, you lost anyway.
- deleted 5y ago[deleted]