Securing mobile broadband

I am starting to see mobile broadband cards proliferate. My concern is
that users are plugging into the private network and also enabling the
mobile broadband cards. This opens the possibility for them to become
a gateway around my firewall for exploits. Does anyone have an opinion
on how to address this vulnerability?