OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Tightening up security for quarantine script

From: Pierre Dufresne (pierre.dufresnemessf.gouv.qc.ca)
Date: Thu Feb 05 2004 - 09:05:21 CST

Hi everybody,

When you use the quarantine functionnality of Windows 2003, you need to write and then distribute a script on the computers of the users that are going to connect through a VPN.

This script is supposed to do some validations and then end with the execution of a small utility called RQC.exe that sends an OK return code to the VPN server.

In our environment, most of the users are local admin of their laptop and are in a position to modify the script, thus bypassing the validation process.

Has anybody been using this quarantine feature and given some thoughts on how to protect the script?

Any comment would be appreciated.

Thanks

---------------------------------------------------------------------------
---------------------------------------------------------------------------