Can an infected home laptop spread malware into the office over the VPN?

Yes. Once connected, a laptop on the VPN is inside the network, often with wide access. Malware picked up at home, from a family member's download or a compromised home router, can then scan the office network and reach file shares and servers like any other internal host. Limit what VPN users can reach to the systems they need, require multi-factor authentication, keep endpoint protection and updates current on remote laptops, and do not let personal devices connect to the company VPN. If the VPN traffic crosses a monitored segment, NetSenX sees the laptop's connections and flags scanning, lateral movement and beaconing from it, on every plan. A laptop that runs the agent is watched on its own, wherever it is. What happens inside the laptop stays the job of endpoint protection.

← All 40 questions on Remote work and exposed servicesAll topics