That might do it. But even so, you'd think an advanced security government organization would set up a multi-tiered network. It's easy enough to do - disable all network protocols except IP, and then give the servers with sensitive data a different set of (non-routable) IP addresses than the internet connected ones. Then designate one computer as a router/firewall between the two networks, and a 2nd lesser firewall between the network and the internet.

Voila, sensitive data that the internet can't access. And "cutting the link" is as easy as powering off the designated router computer, or pulling it's network cables.





Any simple hardware firewall and non-routable IP range will protect personal data. My home network is protected that way (Airport Extreme and 10. address range). If you have strangers who don't know about safe web surfing, then add a software firewall that looks for viruses and has a blacklist.

The part I disagree with is when they push it one step further and put in a "whitelist" firewall instead - i.e. only these company approved web sites are allowed to visit. Or they technically *have* internet access to serve *customers* outside the company, but everyone inside is blocked from using it.

They always cite "security" as the reason, but it's really about control. They don't trust their employees, so they cut the web/email access, restrict telephone access, ban personal radios and music players and cell phones, put in cameras, and make sure the employees are at their desk every instant and have no choice but to work. The problem is, by my observations...it doesn't work. The ones who goof off will do so anyway, and the ones who actually work will feel miserable to be treated like prisoners. And yes, I did work for a company once who did all that unnecessarily.

I should write a book about that. Or at least a guide.





I've gone to great lengths to keep this site free of viruses - the software, for instances, intensely filters posted text to resist the posting of viruses (or even spam, which usually contains them). It has an HTML filter, which maybe I should apply for a patent on someday, that checks every HTML tag used to make sure it's allowed. The only thing I really can't protect are legitimate looking external links.

Since I visit daily, if I even think there might be a virus I'd shut it down until it's cleaned up.