Re: If you cannot patch it quarantine it
And for a large and complex estate that's not trivial. There'll be a lot of special cases to analyse.
Even in our small (relatively) network, there are bits of specialist kit that the people out in the business *have* to be able to use. In some cases, those bits of kit are 10-15 years old and we don't have the budget to buy New! Shiney! to replace them.
So you have to get quite creative to maintain access to business-critical stuff while trying to protect them from the network and the network from them..
Biting the hand that feeds IT
