Do home-office laptops need the NetSenX agent installed?

Not necessarily. If remote staff reach company systems only through a VPN, a sensor on a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port behind the VPN gateway already sees what their laptops do on the internal network, which is where most damage is done, and that sensor counts as one device. Install the agent on a laptop when you want to watch its connections even while it is off the VPN: for example a manager's or administrator's laptop, a developer's machine with access to production, or a laptop that uses split tunnelling. Each laptop with the agent counts as one device, so decide by risk rather than by headcount. The agent runs on Linux and macOS; on macOS it works in a basic mode without packet capture. For every laptop, agent or not, keep endpoint protection, updates and disk encryption, because no network sensor sees what happens inside the device.

← All 40 questions on Remote work and exposed servicesAll topics