From: John Beckett 

"Geo"  wrote in message
news::
> I guess I'm stupid but I only use VPN's to link secure networks together,
> using one to allow an insecure computer total access to a secure network
> seems like a security accident just waiting to happen.. Insecure machines
> like wandering laptops belong on their own network firewalled from the
> secure network with only limited access.

We live in interesting times...

Fast-forwarding to the future by, say, two years: The only half-way decent
procedure to allow a roaming laptop to have remote access to your network
is to require that the laptop be running a DRM-protected system, including
hardware, BIOS and OS. That way, you will know that only trusted software
is running on the machine.

Anything less than the Microsoft/Intel/et-al DRM initiative means you just
won't be able to allow roaming machines to connect to the core office
network.

John

--- BBBS/NT v4.01 Flag-5