Working remotely, How to make laptop isolated on my home network

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Working remotely, How to make laptop isolated on my home network

mattak

11 posts

Geek

#273037 31-Jul-2020 21:11

Evening all, I'm after a little bit of advise about the best way to do this.

I have a company-issued laptop and am wanting to isolate what this computer can communicate with (E.g. only work sites) on my own personal home network. Because I'm aware the machine has ZScaler installed (remote surveillance software) & I'm specifically wanting to block the ability for the machine to communicate with ZScaler but still use Teams, Outlook, Excel, Chrome, etc.

I have a pretty average router - DLink DIR-890L and it tend's to only have the basic "Website Blocking" function built into it. I've seen there are options IPv4 firewall allow/deny as well.

But my key question is, can I block my work-issued laptop from communicating to ZScaler servers at the router level?

After all, it is using my home network which I'm paying for.

lxsw20

3689 posts

Uber Geek
+1 received by user: 2174

Subscriber

#2532465 31-Jul-2020 22:09

I'm not sure why you think that's an OK thing to do. You don't own the laptop, your company does and it's their job to keep it secure, you breaking that isn't going to go down well.

If you've got an issue with the fact you're paying for your home internet, why not talk to your company and see if you can get a rebate on that.

andrewNZ

2487 posts

Uber Geek
+1 received by user: 1461
Inactive user

#2532469 31-Jul-2020 22:23

Yep. Actively disabling or otherwise interfering with company information security measures is a good way to lose your job.

If you're worried about the machine being on your network and spying on the rest of your network (I'm 99% certain it's not, and if it did that would probably be a privacy breach on their part), putting it on some kind of guest network is more likely the answer.

mattak

11 posts

Geek

#2532472 31-Jul-2020 22:27

andrewNZ: Yep. Actively disabling or otherwise interfering with company information security measures is a good way to lose your job.

If you're worried about the machine being on your network and spying on the rest of your network (I'm 99% certain it's not, and if it did that would probably be a privacy breach on their part), putting it on some kind of guest network is more likely the answer.

Thanks for your reply Andrew, will probably be better if i just put it on "guest WIFI". Not worth sweating the small stuff over.