Best Practices? Using Kali safely on the enterprise network

[d0minicide]

I am curious how others are handling the use of Kali in their enterprise networks. For anyone currently using Kali in their workplace:

How are you securing access to the Kali host?
How paranoid should I be about leaving a Kali machine virtual or otherwise on the network for an extended period of time?

[grid]

Well, since most network services aren't set to start by default in Kali, it's pretty locked down out of the box. When I do need services, I start them up manually, then shut them down when I'm done (including network services). Of course, I have a strong root password on my Kali machine.

Whenever I do something "professionally evil" (with apologies to secureideas.com ) I always notify the appropriate staff, give them my Kali box IP address, and let them know the dates/times my "evil" is taking place.