It depends on the PC/client configuration. If the client is allowed to establish two seperate tunnels then the client can act as a bridge between two connects (secure and non-secure) and protected environment can be at risk. So, it is common practice not to allow two seperate connects (corporate VPN and unsecure environment) on client setup.
Hey Sanjay! Great work!
I'm working on a co-location project at an Intel facility and I'm curious, do you provide OnConnect AP's in less than physically secured areas? More importantly, if so, what security measures are in place to prevent someone from disconnecting the cable at the AP and using that to get on the protected network?
Thanks!
Good Podcast! Glad we got a wireless security guy on here. A burning question I've always had per wireless security. If you are on an unsecure wireless connection while encrypted over a VPN to your business office, couldn't your system and the business network still be at risk?
I've seen VPN enviroments where a PC is still unproctected from the traffic on the Wireless LAN even with a VPN in place, which I believe could create risk for the business network (i.e. if the pc is at risk, and connected to the business the business is at risk) How do you deal with this?