Is it possible to isolate a computer on a network such that it can be accessed remotely by contractors, but not have access to any of the other machines on the network in any way? I understand it would always have access to the gateway at the least, but can it be isolated from other machines? I know I can secure the gateway sufficiently.
Could this be done with a software only solution? Would I need a physical firewall device? Could it be accomplished via subnets?
I'm trying to avoid a second ISP connection. I know that is a viable, but clunky, option. Thanks very much for any help you can provide.