Tag Info

Hot answers tagged

8

Neither of these technologies can prevent a DDoS attack, what they can do is help to prevent a DDoS attack from taking down services. They have completely different functions so you can't say one is better is better than the other. An Intrusion Prevention System looks for anomalous traffic on a network and can alert operations staff that a DoS attack is ...


3

Separate physical locations can share the same logical network using a VPN. A client's IP address can be used in a multi-factor authentication system, but a password and a Key FOB is more commonly used.


3

An external vulnerability scan must scan all machines that are in scope for PCI-DSS that have public ips from outside the firewall (eg the internet). This must be done by a qualified party called an ASV. The PCI Council maintains a list of ASVs on their website. The internal vulnerability scan must scan all machines that are in scope for PCI-DSS from ...


2

Dr.Ü has no clue with such comment. Good pentesters break and fix stuff. Monkeys who just run tools are not considered pentesters. Who should fix it? That really depends of the company's policy. In one company it might be the sysadmin. In other company the network admin. In other company the security engineer. In other company the...


2

Given the limited scope of use, I would say no, anti-virus is not critical. There are a couple of things I would do here to ensure that it's as secure as it can be, under the circumstances. Make sure you have all the latest Windows Updates for XP. (May they rest in peace.) Ditch Norton entirely, and configure the Windows firewall to reject all inbound ...


2

Whether a VPN is necessary in this scenario would largely depend on the nature of the traffic between the worker and the web server and whether you're worried about Man-In-The-Middle(MITM) attacks. A VPN could add two potential benefits to your security here. Firstly it should encrypt the data between the endpoints. This is obviously a security benefit if ...


1

It is likely that the port you have open will always show as being in a different state from other ports if someone does a scan of your IP address, so it would make sense to ensure that there definitely isn't anything listening when the game server is shutdown (although if the game has vulnerabilities it probably does not matter if it is listening all the ...


1

On your client: An 'open' port (TCP) will respond to a new connection request - the remote client will send a 'SYN' and your server will reply with a SYN-ACK starting the TCP/IP 3 way handshake. if it's 'closed' then your server will reply with an RST - effectively 'refusing' the connection. What a firewall does is: If a port is 'authorized' then ...


1

There is NSS Labs which contrary to Gartner actually tests the devices. But, talking about firewalls is just about as specific as taking about means of transport. What you actually need varies between a hand barrow and a container ship. Even within the same class (like passenger car) you will find lots of different solutions which not only differ by price ...


1

You should give consideration to converting the document from its native format. Convert JPG to PNG, say, and Word to PDF. It's a catch-all attempt to try and remove any document-specific malware. The advantage is that it might protect against unknown and future threats. The disadvantage is that it might mess with formatting or lose content. The level ...


1

You probably won't find it for desktop firewalls. That feature requires a much higher level of network knowledge than most users have/are willing to study. Therefore, firewall companies won't put much effort developing something like this. On the other hand, professional network appliances tend to be more inclined in that direction. I know that the Palo ...


1

I vote for option # 1, and I have first hand experience with this. I'm seeing a lot of misinformation and/or bad advice in some of these comments and answers. The scanner should: have admin level access to the assets. have access to assets on all ports/protocols. be whitelisted on IPS/IDS sensors and other security devices. The main purpose of a ...


1

Firewall auditing requires knowledge and interpretation, so there are no tools that will go 'ding!' and tell you you're compliant. However, various tools can be used to make the review and audit process easier. Two that I've used are: Tufin SecureTrack Nipper Studio And many tools will do, e.g. see Firewall rule base documentation and migration tools.



Only top voted, non community-wiki answers of a minimum length are eligible