File Sharing - How to Block Guests ?

[lafargeotte]

Some advice needed please.

We have a small network which includes 3 PCs (Desktop Win 7 Ultimate x 64, Laptop Win 7 Ultimate x 86, and a Laptop Win XP Professional). These 3 PCs file share on the network (in all directions), the Laptops using Wi-Fi. The router is the latest Orange Livebox (French version), and we use this as our package includes free phone calls using the Livebox connection.

We run a small holiday rental which includes access to the internet for the guests using Wi-Fi.

What I would like to know is can the guests also see the files on our network PCs?

If they can, is there a way to prevent this? (Perhaps configuring our firewalls - Eset Smart Security on all 3 PCs).

I hope that I have explained clearly, and any advice would be much appreciated.

TIA,
Paul.

 

[Dwarf]

Hi Paul,

Do you have a separate Wi-Fi network for your guests?

 

[chev65]

Good idea Dwarf.

My Dlink DIR-655 router has a wireless guest zone under the advanced wireless settings. The guest zone uses a seperate SSID.

This keeps your guests from being part of your regular network so they can't see your files.

 

[lafargeotte]

Hi,

No separate Wi-Fi for guests.

Here is a screenshot of the 'Advanced' section in the router.


TIA,
Paul.

 

[Zahl]

I could be mistaken but if you setup password protected sharing you could also effectively block guests from accessing your shared files. Still not as convenient and safe as a router with a guest zone which I would highly recommend looking into for your situation

 

[lafargeotte]

I could be mistaken but if you setup password protected sharing you could also effectively block guests from accessing your shared files. Still not as convenient and safe as a router with a guest zone which I would highly recommend looking into for your situation

From Windows Help:
By turning on password-protect sharing in Control Panel, you can limit Public folder access to people with a user account and password on your computer.


Does that not mean that only users on a particular PC can access the files?


If not, does password sharing mean that all PCs on the network need another or new password as well as their Windows login password?

 

[Dwarf]

Oh dear. That is not very secure at all. I would say that the likelihood of guests being able to see your files (and, conversely, you being able to see theirs) is quite high. You should really be using separate networks in a business environment, in order to keep the staff side private and apart from your guests and other users. If you have confidential data (and I suspect that you do), then it is very important that you take steps in order to protect it. What you can do, if you don't have a guest facility on your router, is to attach another router to your main one via one of the Ethernet connections. This new router will then become the wireless connection for your guests. You can now make the primary router secure for the staff. On this router, enable SSID (don't broadcast it), WPA2/PSK and MAC filtering to ensure that only authorised devices can connect.

Simplified Diagram:

ISP
|
Main Router -- Your Private Network (wired/wireless [with SSID, WPA2/PSK and MAC filtering protection])
|
Second Router -- Guest Network (Open Access)

To generate passwords for WPA2/PSK, I suggest that you visit https://www.grc.com/passwords.htm and utilise the second selection, 63 random printable ASCII characters, for maximum security. Note that each time you refresh this link, you will get a different combination which will not be repeated.

 

[PooMan UK]

I agree with Chev get a router that allows you to have guests that can connect and use the internet but not access your local network

 

[lafargeotte]

Been reading elsewhere about admin sharing.

Would 'admin' shares work?