Is it possible to scan laptops of users who are not on your network (e.g., consultants) before giving them access to resources?
Can you also explain the reasoning behind why/why not?
Is it possible to scan laptops of users who are not on your network (e.g., consultants) before giving them access to resources?
Can you also explain the reasoning behind why/why not?
This is obviously product dependent. Our team recently invested in Tenable, specifically their new .IO (it's kind of a work in progress...).
They provide an agent you can deploy to a machine (your owned asset or contractor machine). Anytime the workstation pops online it will receive scan parameters and report results up to the cloud (.IO instance) for you to review.
This is used for vulnerability management (port scans, CVE / CWE, software enumeration, local account enumeration etc.).
I'm sure other vendors provide very similar solutions.
Nessus agents also work with on-prem Nessus Manager running on either Windows or their Tenable Core VM. The agent scans can also synch with Tenable.sc on -prem as well and import scan results for more advanced reporting and analytics in a single pane of glass.