Re: If you cannot patch it quarantine it
> "You don't need funds to block port 445 for machines that don't need it and to segregate VLANs"
Actually, you do. It's called slack staff time. The NHS IT is run on a very constrained budget, and what you're suggesting needs someone to look at what's on the network, and work out a plan for sorting it out. From my (limited) experience with them, they don't have enough staff time to do that.