Network isolation for collaboration software

A method comprising:

• implementing a workspace, wherein the workspace is configured to enable operation of a first set of one or more applications or processes via a first memory space;
• implementing an isolated computed environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space, wherein the second set of one or more applications or processes comprises a multi-user interactive software application;
• isolating the isolated computing environment from the workspace using an internal isolation firewall;
• and
• communicating data associated with the multi-user interactive software application with at least one untrusted destination via a proxy device, wherein the multi-user interactive software application is unable to communicate the data until the isolated computing environment has authenticated with an authentication device.

A system comprising:

• a network;
• an authentication device;
• a first computer configured to connect to the network, the first computer comprising a first processor and a first memory, wherein the first processor is configured to:
• implement a first workspace, wherein the first workspace is configured to enable operation of a first set of one or more applications or processes via a first memory space;
• implement a first isolated computing environment, the first isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space, wherein the second set of one or more applications or processes comprises a multi-user interactive software application;
• and
• isolate the first isolated computing environment from the first workspace using a first internal isolation firewall;
• and
• a second computer configured to connect to the first computer via the network, the second computer comprising a second processor and a second memory, wherein the second processor is configured to:
• implement a second workspace, wherein the second workspace is configured to enable operation of a third set of one or more applications or processes via a third memory space;
• implement a second isolated computing environment, the second isolated computing environment being configured to enable operation of a fourth set of one or more applications or processes via a fourth memory space, wherein the fourth set of one or more applications or processes comprises a multi-user interactive software application;
• and
• isolate the second isolated computing environment from the second workspace using a second internal isolation firewall;
• wherein the first computer and the second computer are configured to communicate data associated with the multi-user interactive software application via a proxy device, and wherein the multi-user interactive software application is unable to communicate the data until the first isolated computing environment and the second isolated computing environment have authenticated with the authentication device.