Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Confidential Network

Is there a way that we could restrict a desktop machine accessing any other system in the network ?

if so will we be able to implement an encrypted communication between the end machines .

2 REPLIES
Gold

Re: Confidential Network

An IPS is not the device you want for this job.

For access restriction you should look at using VLANs, for encrypted communications you should set up a tunnel between the desktop VLAN and the destination VLAN

Bronze

Re: Confidential Network

Rhermes is correct; IPS is not the right solution. You want VLANs and ACLs, potentially NAC but that's overkill.

There are 3rd party products out that extend this as well, so if (for example) you permit a user to Remote Desktop or VNC from Desktop A to Server B, they're 'locked' into Server B and can't RDP out anywhere from there. I think one solution was called Xceedium.

140
Views
0
Helpful
2
Replies
CreatePlease to create content