Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [intranet]

An intranet is a private network accessible only to an organization's staff.

2
votes
1answer
39 views

Server secured with a Certificate from a Custom CA Root: OK on Firefox but KO on Chrome? [duplicate]

The Setup In order to protect the very small intranet of the ACME company, which contains two private servers, foo-server and bar-server, I've created with OpenSSL: The Root CA Certificate The ...
2
votes
1answer
63 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
3answers
162 views

How important is encrypting traffic that never leaves a data center?

How important is encrypting traffic that never leaves a data center? To me, it seems both important and (thanks to IPsec) easy to achieve. However, it seems to rarely be done; Google does not do it, ...
1
vote
3answers
240 views

How to detect when one or more devices in my local network have become DDOS attack nodes?

I have a home network, big family, with around 20 devices on it at any given time. It seems like every year or so, some device gets a virus or a security flaw is revealed, and the device starts ...
148
votes
12answers
21k views

Do I need to encrypt connections inside a corporate network?

Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
3
votes
2answers
4k views

Adding network drive to trusted intranet sites security hole?

We have a shared network drive that is mapped, and when we open certain files we get a dialog like I found this site which explains that adding the network path to Local Intranet trusted sites for ...
0
votes
1answer
140 views

Linux, Security and Safety inside a large intranet [closed]

One needs to configure freely a development environment under Linux set up inside a large intranet, with access to the internet. I am not a Linux Administrator, nor a Network Expert. From what I can ...
45
votes
5answers
6k views

Should web applications that are only accessible from a LAN be held to the same security standards as publicly accessible websites?

Many security measures are intended to protect against hostile users who want to abuse the software or get access to content they don't have permission to access. Things like CSRF protection, SQLi ...
36
votes
7answers
8k views

Is it acceptable for an internal HR site to run over HTTP? [closed]

Our internal HR site - which has our personal details, payslips, holiday details etc. runs entirely off a basic http site. The site is only accessible within the company network, and can't be ...
1
vote
2answers
843 views

How can you enumerate an internal network with minimal outside knowledge?

The scenario is that you get to plug your laptop into an Ethernet port in some building. You get an IP address (DHCP) and can access the internet. Right out of the gate you know your IP, gateway, ...
1
vote
2answers
327 views

SHA-1 deprecation and impact on self-signed certificates

What the impacts of the SHA-1 deprecation will be on internal/intranet self-signed certificates? Will this impact/stop internal/intranet HTTPS service such as web interfaces?
0
votes
2answers
1k views

Deploy intranet application with SSL certificate

My company has an intranet application build on the WAMP stack - Windows / Apache / MySQL / PHP. This application is installed on a server at each customer's site, and is accessed via LAN IP address. ...
0
votes
2answers
150 views

What if internal certificate details like CN, Serial Number, validity, CA etc. are shared to external parties from my intranet site?

If by mistake I have shared the details like Common Name, Serial number, etc.. of the certificate of my intranet site/server that is not exposed to the internet will it help attackers exploit the ...