With the beginning of the self-isolation regime, many employees of our company switched to remote work. Controlling access to USB dongles has become a serious problem, which required a special device to solve.
We did not allow users' own machines to enter the protected perimeter and install corporate software on them. This is a bad approach from the point of view of information security, since the IT department does not actually control such computers. So that employees could connect to information systems from home, it was necessary to create a virtual private network and raise the remote desktop service. Individual employees were given available laptops if they needed to work with local software. The transition to remote control did not require large expenses. In order not to buy an expensive server, we limited ourselves to renting a virtual one and purchasing Microsoft terminal licenses. The advantages of this approach are obvious: you didn't have to spend money on hardware and fiddle with a motley fleet of someone else's equipment. To give the user a familiar environment,just set up an RDP connection. We also prescribed restrictions on the connection of external media, and the configuration of corporate laptops was already quite secure: users did not have administrator rights on them, security policies were applied, a firewall, antivirus, etc. etc.
, ?
. USB- , . 1 (HASP), , ESMART Token USB 64K — , «» . VPS USB, . , , .
-, , nalog.ru . , . ( ) , . , USB- , - .
, , . . , — . , , , - .
. USB over IP . , , USB . «» , , , . , - . , .. «» .
?
. , . , ? . (Digi Anywhereusb, SEH myUTN . .) : 14 — . . DistKontrolUSB-64 — ( ) USB over IP 64 .
, . USB-, , , , . , , 106500 . .
DistKontrolUSB?
USB, . Windows, Linux OS X. , DistKontrolUSB-64. , IP — . SSL/SSH, . .
, , . ( ) , Hyper-V . : . , , /. — . Windows . Linux/OSX , .
, .
USB .
.
?
DistKontrolUSB-64 , - ( HTTPS) SSH, . IPv6, USB . , . , . ( — - 64 ) .
, - . !