Networking Advice

[jasonab]

Good Day

I was wondering if someone can point me in the right direction. I work for a company and at present we have three entities, company A, company B and company C.

Company A and B are managed by my headoffice and fall in line with the head office policies. Company C is a tenant in our building and currently on our exchange, file server and internet. The internet policies set by company A is starting to affect the business of company C. We currently have no managed switches or VLAN. Company C only has 5 users.

I want to put company C on a separate network and internet connection, and if they move about the building their devices must remain part of that network irrespective of where they are connected. If an attacker were to break through company C's internet firewall then, the attacker should not be able to access items in company A or B. Company C must still be able to access the current exchange server and their shares on the file server.

I am thinking that switching to managed equipment and setting up VLAN's and statistically routing the traffic of exchange and file server but I am not sure if this is the right way to. I just need someone to point me in the right direction, money is tight at the moment.

 

[azazel1024]

Pretty much no matter what you do, if they can breach company C's network, they can access that exchange server and shares on the file server, which if resources on company A and B's network access that same exchange server and file server, would also be vulnerable.

You can limit vulnerability to some extent, but it is significantly more vulnerable than if these were completely seperate networks and resources.

 

[jasonab]

Thank you for your input.