Tag Info

New answers tagged

0

"Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall:" Typically, if a host within your environment gets infected, it's not going to be port scanning other devices on your LAN. At least in my experience. It's typically going ...


0

As other answers have covered the features you need to look for while finalizing an SIEM solution for your organization, I would only like to add a few important points about the implementation. You have mentioned that your boss wants a certain piece of information about the employees and he is right when he thinks that an SIEM can do the required task. ...


0

Every connection within your LAN must go through a router or switch. Some routers allow access control lists, which can block/allow connections to specific ports and services. Each host may also implement internal firewall rules to only broadcast a service to specific hosts, this however, means more management and operational overhead. Another option is to ...



Top 50 recent answers are included