security on public WiFi networks

CTcompanyguy · 03-07-2009, 06:23 AM

I work for a small company with about 20 laptop users. I am trying to convince the owners that we should not allow these users to access public, unsecured WiFi networks (airports, public hotspots, etc.). Most of these laptops have databases which tables contain social security numbers, names, and addresses of people. I can't convince them that this is a security risk, they seem to think that by having a windows firewall on and using VPN for traffic things are safe enough. Can anyone provide links to legitimate sites (not someone with something to sell) that provide information to help support my case of not allowing public WiFi use? Thank you.

**johnwill** · 03-09-2009, 07:26 AM

If they're using a VPN for access and a decent firewall, they're probably right. Obviously, if they also browse the Internet unsecured, they are at risk.

Truthfully, the proper solution to this issue is probably to encrypt the sensitive data unless it's actually being accessed.

03-07-2009, 06:23 AM	#1 (permalink)
CTcompanyguy Registered User Join Date: Mar 2009 Posts: 1 OS: XP	security on public WiFi networks I work for a small company with about 20 laptop users. I am trying to convince the owners that we should not allow these users to access public, unsecured WiFi networks (airports, public hotspots, etc.). Most of these laptops have databases which tables contain social security numbers, names, and addresses of people. I can't convince them that this is a security risk, they seem to think that by having a windows firewall on and using VPN for traffic things are safe enough. Can anyone provide links to legitimate sites (not someone with something to sell) that provide information to help support my case of not allowing public WiFi use? Thank you.

03-09-2009, 07:26 AM	#2 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,711 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Re: security on public WiFi networks If they're using a VPN for access and a decent firewall, they're probably right. Obviously, if they also browse the Internet unsecured, they are at risk. Truthfully, the proper solution to this issue is probably to encrypt the sensitive data unless it's actually being accessed. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience