Wired network security with public/guest access
I am anticipating a request to allow our organisation to provide computer suites for public/guest access and was wondering if anyone had any input on how they would manage this from a network security point of view?
I have a public access wifi network which has a seperate VLAN and is firewalled from the rest of the corporate network, but I believe this wouldn't be possible with a wired network that would be shared by guests/public/employees?
Any suggestions on a solution to this? I am worried about zero-day vulnerabilities and tools which could easily circumvent software based security, as opposed to effectively having a physically seperate network, which isn't possible in my situation.