# Can someone plug a device into a free network socket in our office?

In most small offices, yes: a live socket in a meeting room, at reception or behind a printer gives whoever plugs in a device the same network access as a company PC. A small computer hidden there can call out to its owner and act as a door into the network for months. Close it with simple measures: disable switch ports and wall sockets that are not in use, put meeting rooms and reception on the guest network, use port security to allow only known devices on a port, or 802.1X so that a device must authenticate before it gets any access. Walk through the office now and then, and check the switches for unknown devices. NetSenX helps find what already got in: its network map lists devices seen on monitored segments, including ones without an agent, on every plan, and a hidden device that calls out at regular intervals is flagged as beaconing. A device that stays silent, or sits on an unmonitored segment, is not seen.

FAQ: [Zero trust, identity and segmentation](https://netsenx.com/en/faq/zero-trust) · https://netsenx.com/en/faq/can-someone-plug-a-device-into-a-free-network-socket

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/what-is-ndr

## Related questions

- [What is 802.1X, and does a small office need it?](https://netsenx.com/en/faq/what-is-802-1x-and-does-a-small-office-need-it)
- [Is multi-factor authentication enough to stop account takeover?](https://netsenx.com/en/faq/is-mfa-enough-to-stop-account-takeover)
- [Does a partial MFA rollout count for insurers and auditors?](https://netsenx.com/en/faq/does-a-partial-mfa-rollout-count)
- [Which MFA methods resist phishing?](https://netsenx.com/en/faq/which-mfa-methods-resist-phishing)
- [What is MFA fatigue, or push bombing?](https://netsenx.com/en/faq/what-is-mfa-fatigue-or-push-bombing)