But that tactic typically only works with company-issued devices, says Robert Siciliano, an online security expert at security vendor McAfee.