We already have a couple of people working from home, accessing some internal servers via VPN. They're all using company provided laptops or PCs which we have complete control over. Now we're faced with more people wanting to do home office but using their own machines. They need access to at least our internal IM and fileserver.
Giving them VPN access to our internal network from their own machines seems to pose a potential security risk. I'm mostly concerned about giving them access to our samba fileserver. What has been suggested is to simply rely on an on-access virus scanner protecting the fileserver, but I'm not completely convinced this is sufficient.
Is there some kind of access-proxy or something like that which we could put into an DMZ and only allow outside access to that server, do some kind of scanning/filtering and have them access our internal servers from there? Preferably opensource/linux based as we're mostly using CentOS/RHEL for our servers and would like to keep it that way (opensource shouldn't imply we're not willing to pay for it, just need some ideas or products which we could look at).
