How do I secure remote workers who access the company network?

Start with the account and the device, then limit what the connection can reach. Require multi-factor authentication for the VPN, e-mail and every cloud application; give staff company laptops with full-disk encryption, endpoint protection and automatic updates; and keep personal devices off the VPN. Configure the VPN or remote-access gateway so that each group reaches only the systems it needs, not the whole office network, and log every session. Give staff a simple way to report a lost laptop or an odd sign-in prompt, and remove access on the day someone leaves. Then watch the point where remote work meets the company: with a sensor on a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port behind the VPN gateway, NetSenX sees what remote devices do inside the network and flags scanning, lateral movement, beaconing and unusual outbound volume on every plan. It does not manage accounts, devices or the VPN; your identity provider, device management and gateway do.

← All 40 questions on Remote work and exposed servicesAll topics