0

Let's say there is a system that can set IP ACL for security. If administrator can't bypass IP ACL, account may by locked up when machine or network IP changed But if administrator can bypass IP ACL, then an attacker can bypass IP ACL when got administrator account. IP ACL gets meaningless.

Is there good way to mitigate both situations?

Improve this question
2
  • If your administrator account is compromised, you've got bigger problems and many other protections are rendered "meaningless".
    – belkarx
    Mar 21 at 5:53
  • When IP ACL enabled, attacker should hack physical device in IP ACL range, even if administrator account has been compromised. But this leads to losing control of IP is losing account.
    – Seongbok Youn
    Mar 21 at 11:10

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.