1

In my University, the network is protected by Cyberroam Firewall and we are provided a login page through which we access internet and the login page isn't secured.It sends out the userid and password unencrypted in the network. From past few days, someone has been changing my passwords. And I think someone is performing MITM and stealing credentials. How do I figure out if this is the case and protect it ?

  • 2
    'You' don't. You report it to your university's IT services. If you are correct they will take action. – iainpb Oct 14 '17 at 10:23
  • 1
    They are dumb and the IT services in the university is outsourced. No access to students. – Arif Oct 14 '17 at 10:45
  • 2
    There is nothing you can do. Even if you could replicate the problem to prove that someone could do this, you still need to engage the IT team to do anything about it. – schroeder Oct 14 '17 at 19:07
1
  1. You do not need to concern it is Cyberroam Firewall or other brands of firewall. Different firewall products always have the similar functionality. What you should know is the configuration & functionality of firewall.

  2. Functionality: Actually, you should understand the original objective of firewall. Pure firewall is only used to filter different network activities (e.g. IP addresses, port numbers, transmission direction, payload applications, etc.). User ID and password encryption is not the mission of pure firewall, but protected by secure channel methods (e.g. VPN). The truth is: many modern products have combine firewall, IDS/IPS, VPN, anti-virus,etc. functions together into a single product. You buy different packages with different prices. Hence, first, you should know whether your Cyberroam firewall has the channel encryption function.

  3. Configuration: if your firewall has the channel encryption function, you need to know how it is configured. In your case, userid and password are sent in plaintext. Hence, this firewall may not include channel encryption function or not configure/activate encryption. In addition, only network-level integrated firewall has the capability to do such encryption.

What you should do to prevent this - Report to your network administration. (one solution is encrypt information before sending. However, you use the common login page. Encryption on your own is not feasible.)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.