Should contractors get a separate network?
Yes, where you can, because it limits what an unmanaged laptop can reach. On a flat network, a contractor's laptop sits next to payroll, file servers and production systems, so any malware it carries can try to reach all of them. A separate Wi-Fi network or VLAN that allows only the internet and the specific systems the project needs, through a firewall, turns that into a short, reviewable list of permitted connections. Remove the access when the project ends. Segmentation is done in your switches, firewall and Wi-Fi controller; NetSenX does not change network settings or block traffic. What it adds is a check that the separation works: if monitoring shows a contractor's device reaching internal hosts outside the permitted list, or scanning, it raises an alert.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can we see when a contractor's laptop stops connecting after the project ends?
- Can network monitoring detect data copied to a USB stick?
- Which tool stops employees copying files to USB drives?
- What can network monitoring see when copied files are uploaded later?
- Can we limit who sees security alerts about sensitive departments?