topic Confidential Network in Network Security https://community.cisco.com/t5/network-security/confidential-network/m-p/1158932#M77320 <P>Is there a way that we could restrict a desktop machine accessing any other system in the network ? </P><P></P><P>if so will we be able to implement an encrypted communication between the end machines . </P><P></P><P></P><P></P><P></P><P></P> Sun, 10 Mar 2019 11:35:16 GMT vineesh.viswanath 2019-03-10T11:35:16Z Confidential Network https://community.cisco.com/t5/network-security/confidential-network/m-p/1158932#M77320 <P>Is there a way that we could restrict a desktop machine accessing any other system in the network ? </P><P></P><P>if so will we be able to implement an encrypted communication between the end machines . </P><P></P><P></P><P></P><P></P><P></P> Sun, 10 Mar 2019 11:35:16 GMT https://community.cisco.com/t5/network-security/confidential-network/m-p/1158932#M77320 vineesh.viswanath 2019-03-10T11:35:16Z Re: Confidential Network https://community.cisco.com/t5/network-security/confidential-network/m-p/1158933#M77321 <HTML><HEAD></HEAD><BODY><P>An IPS is not the device you want for this job.</P><P>For access restriction you should look at using VLANs, for encrypted communications you should set up a tunnel between the desktop VLAN and the destination VLAN</P></BODY></HTML> Mon, 06 Apr 2009 18:15:00 GMT https://community.cisco.com/t5/network-security/confidential-network/m-p/1158933#M77321 rhermes 2009-04-06T18:15:00Z Re: Confidential Network https://community.cisco.com/t5/network-security/confidential-network/m-p/1158934#M77322 <HTML><HEAD></HEAD><BODY><P>Rhermes is correct; IPS is not the right solution. You want VLANs and ACLs, potentially NAC but that's overkill. </P><P> There are 3rd party products out that extend this as well, so if (for example) you permit a user to Remote Desktop or VNC from Desktop A to Server B, they're 'locked' into Server B and can't RDP out anywhere from there. I think one solution was called Xceedium.</P></BODY></HTML> Tue, 07 Apr 2009 18:01:24 GMT https://community.cisco.com/t5/network-security/confidential-network/m-p/1158934#M77322 clausonna 2009-04-07T18:01:24Z