Company wants to isolate corporate network from the Internet

Question

Corporate is nervous about cyber attacks and has asked about isolating the corporate network from the Internet and use VM's for webmail and browsing. Updates can be done offline. Is this doable or just ridiculous?

Mave83 · Accepted Answer

Isolating the network does increase the security while reducing the attack surface. But without good usable internet access, it's harder to be productive as an employee. Therefore efficiency of the workforce will be lowered.Depending on your company size, there are ways to achieve relatively high security. However, no system is secure enough and everything can be hacked at some point if there is enough interest in it.

brentcetinich · Answer

There are others like this. This is the one I can recall now . Basically the proxy mitm a Js agent which is pretty much vnc for your browser. You only get the view of the headless proxy sandbox rendering whatever page you requested . So if any escape happens it happens in an isolated disposable compute managed by the proxyhttps://www.broadcom.com/products/cyber-security/network/web...

dbish · Answer

I&rsquo;ve worked on air gapped networks and I was probably a tenth as productive as I normally can be (if that) as a programmer. Having all sorts of info at your fingertips speeds up development and debugging quite a bit. I&rsquo;d be worried your leadership doesn&rsquo;t understand the trade off they&rsquo;re making for company productivity for something like this.

jesterson · Answer

Absolutely doable. The other question may be how this can help from "cyber attacks" but I guess that's for you to figure out.