Re:Firefox extensions are insecure (Score 1)

I have asked my sysadmin to set up a separate network for laptops that might be used outside our intranet that is not part of the trusted intra net.

Ask him to take a look on 802.1x http://standards.ieee.org/getieee802/download/802. 1X-2004.pdf. You can give access to different VLAN based on software policies (i.e. having AV updated and so on)