Having lots of issues with Virus due to BYOD ,Contractor worker

[Ibrahim Jamil]

Hi overseas guys

Greeting

 Having lots of issues with Virus due to BYOD ,Contractor worker

How can i deal with that ,we recently got cisco ISE so how BYOD could be treated using ISE

pls help

Ibrahim

pls advise

[Jason Kunst · Accepted solution]

If you’re worried about someone bringing in affected machine then require them to run the temporal agent

If they’re there long term and don’t want to load that everyday than have them install anyconnect posture

If this is too much or contractor doesn’t have Capability to run these then You can do more things additionally:

Segment them using SGT (from endpoint to endpoints and to appropriate systems) so they can not infect your other endpoints systems

deploy stealthwatch and integrate with ISE via pxgrid to watch to bad behavior and lock them down with rapid threat containment

Looks at Cisco overall portfolio to watch it all. AMP, Umbrella, and on

[paul · Accepted solution]

As Jason said there are several options, but one of the main things you should be asking is "Why are we allowing contractors to connect to the network?".  If the contractor is a long term contractor then they should be given a company owned laptop or a VDI to do their work from.  A good VDI solution solves much of your issue.  If the contractor has specialized software installed on their laptop that can't be implemented in the VDI then you can allow them to VPN in and restrict their access to only the systems they need access to.  A contractor on their own equipment should never be given full access to the network in my opinion.