Questions tagged [network-access-control]
The network-access-control tag has no usage guidance.
89
questions
0
votes
0
answers
43
views
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?
Such as:
blocking (or entirely hiding) the option to connect to open networks
...
- 6,661
3
votes
1
answer
161
views
Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?
Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is ...
- 6,661
1
vote
1
answer
51
views
What are the risks with PPTP (MS-CHAPV1/V2)?
What are the risks with PPTP (MS-CHAPV1/V2)? Are the only ways that it can be exploited are if someone already has access to the network and can ARP poison etc or capture packets some way? Or can it ...
- 11
1
vote
1
answer
199
views
Does my ISP sees that I am using someone else's PPPoE username/password?
I want to ask that does my ISP will be able to see that I am using username/password of someone else on my dialup PPPoE.
- 13
2
votes
1
answer
109
views
Does opening an IPsec tunnel compromise the rest of my VPN?
Let's assume:
I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed)
My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
- 173
3
votes
1
answer
270
views
Same network steal data?
Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password).
Is it possible for me to read their data transfer?
If yes, then it would also be ...
- 33
1
vote
1
answer
132
views
What is the exact security benefit of disconnected environments?
In large organizations, I often see sysadmins mirroring all the stuff they need from the internet locally (container images, rpm and deb packages) for local consumption, with the burden of keeping the ...
- 111
2
votes
1
answer
255
views
Blocking outbound connections to mitigate CVE-2021-44228 log4j?
As I understand it, a successful exploit requires a connection to an external server to download a payload. If a device can't be patched or otherwise mitigated, does restricting its outbound access ...
- 375
1
vote
0
answers
130
views
How can I enforce a security sandbox with any process?
Deno (the node.js fork) is designed to be secure by default. Therefore, unless you specifically enable it, a program run with Deno has no file, network, or environment access. Deno has a set of ...
- 111
22
votes
6
answers
5k
views
Do machines without any listening services need a firewall to block incoming connections?
Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
- 583
3
votes
1
answer
591
views
Setup network with IoT devices
I bought a new router and I'm thinking to make my network a bit smarter from the security aspect.
My question is now: How can I make sure that an attacker cannot get into my "secure" network ...
- 133
0
votes
1
answer
318
views
expose home applications to the internet
I have some web applications (for example jupyter notebook) running on my home pc (ubuntu) that sometimes I would like to access remotely.
What would be an efficient and safe method to do it?
I don't ...
- 177
3
votes
0
answers
2k
views
Unknown device on my home's local network. What to do about it?
My home router's configuration interface shows a device I don't know, connected via WiFi to my local network. According to the router's history, that device connected to it several days ago. It is ...
- 1,945
0
votes
0
answers
139
views
Why is DOCSIS 4.0 implementing weak security protocols?
So I had a look at the latest DOCSIS 4.0 Security Implementation paper here
https://www.cablelabs.com/technologies/docsis-4-0-technology
I found that they’re implementing SHA -1 and 3DES for security. ...
- 1
0
votes
2
answers
233
views
Are there any examples of network-based application firewalls?
As we know, network based firewalls will filter based on information such as source IP, source port, etc. But they won't know what program on the source machine is generating that traffic.
...
1
vote
1
answer
117
views
Security team making the firewall opening, good pratice? [closed]
I'm currently requested in my enterprise to do myself (security team) the firewall overtures requests in TUFIN (firewall workflow), instead of our local IT team. it's for simplicity and saving costs.
...
user213795
0
votes
2
answers
1k
views
How one can find I am using virtual box Virtual Machine linux through Anydesk remote application?
I recently created a virtualbox virtual machine of Ubuntu 18.04 and installed Anydesk remote desktop app in it. An IT guy accessed my computers desktop via Anydesk app, but he is actually inside the ...
2
votes
1
answer
377
views
Best Firewall Zone Settings for Security Gli-net Routers
I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel.
What would be the ...
- 53
0
votes
0
answers
292
views
How to do a SSL MITM for all programs trying to access the internet on my local Ubuntu
How to do an SSL MITM for all programs trying to access the internet on my local Ubuntu.
When a program on my local machine tries to access the internet using https I would like to intercept and ...
- 103
2
votes
1
answer
522
views
Access Control Lists - Why block a port rather than block a protocol?
I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example:
"if you want to block HTTP traffic,...
- 71
12
votes
3
answers
4k
views
Is a global DNS record a security risk for phpMyAdmin?
Services like phpMyadmin needs a domain name to access. Instead of adding a global DNS record, one could make a local DNS record (e.g. in /etc/hosts) to access the site.
Would it increase security if ...
- 223
0
votes
1
answer
443
views
Stateless Firewall configuration and random port number from server
When I was reading about web servers, I came to know that though servers listen to static port (say port 80 for http), immediately after the connection, they assign a different port and thread to ...
- 155
0
votes
3
answers
185
views
What hardware and or software do I need in order to limit outbound traffic?
I have a situation where my users need to be able to access the internet and search engines to be able to perform their jobs. My problem is that I need to prevent them from being able to upload files ...
2
votes
1
answer
252
views
Was the Raspberry Pi-related NASA JPL network breach primarily caused by the failure to keep an updated list of authorized devices?
The question What information was stolen from JPL during the Raspberry Pi hack? refers to an event in recent news (e.g. Engadget's A rogue Raspberry Pi helped hackers access NASA JPL systems) and ...
- 1,415
1
vote
1
answer
69
views
Extending on-premise security to a virtual machine used in Home Office environment
The environment
Our company has a reasonable (from the point of view of a regular employee) security policy consisting of, among other things:
Sophos suite covering both local antivirus solution and ...
- 213
0
votes
1
answer
2k
views
NAC bypass with MAC spoofing
I just started my job as a penetration tester.
Me and my mentor got to the client's office and our first order of business was to bypass the NAC system.
Searching for a printer or other similar ...
user184816
1
vote
0
answers
96
views
UDF Client, Socket Binding and Tags Hack - Need Help [closed]
Background
For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
- 19
1
vote
2
answers
239
views
How dangerous is this Network?
Our school requires everyone to bring their own laptops for homework, etc.
It uses something called 'Genian NAC' to authenticate users.
I can either use Ethernet or Wi-Fi to connect, but both require ...
- 11
1
vote
2
answers
176
views
How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?
I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks.
On Wikipedia it says that it can protect ...
- 111
22
votes
8
answers
8k
views
Is local admin access a danger to a properly set-up network?
I read this question: Is it common to allow local admin access for developers in organizations?
This question makes me wonder. I can see how local admin access is a danger to the machine. But can a ...
- 325
6
votes
2
answers
7k
views
Why is DHCP considered insecure?
Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is.
Consider this scenario...
There is an ISCSI storage network,...
- 161
2
votes
2
answers
1k
views
Wi-fi Certificate Permission and Access to phone/data
There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
- 121
0
votes
0
answers
97
views
When using Symantec security, is our IP address our own or shared, should we whitelist?
The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec.
My question is, do other companies that are also ...
- 139
3
votes
1
answer
1k
views
Should I allow or block wireless devices from directly communicating with each other on my LAN AP?
The question I'm asking is, like all security, a bit open-ended, and ultimately - like all security - it involves a personal balance between ease/usability vs. risk/security:
Should I let users' ...
- 1,684
0
votes
1
answer
346
views
Sharing a message broker between remote systems
We are currently exploring solutions to push/synchronize data between two systems (in two separate networks) in "near" realtime.
The solutions are somewhat limited :
Some kind of RPC mechanism : ...
- 293
3
votes
2
answers
252
views
How to respond when network info sec check requires run of downloaded unknown .exe?
I recently visited a university for an event where I was expected to bring a computer and do work using the campus wifi. On first connection, I was asked to download a "SafeConnect Policy Key" (.exe) ...
- 556
6
votes
2
answers
180
views
Network Access Control for Wireless Network
I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
- 61
2
votes
2
answers
172
views
Is it possible for a network administrator to disable interactive elements on a webpage? (such as text boxes)
As part of my degree, we're currently looking at a hypothetical scenario in which internet access is introduced to prison cells.
As part of the information risk assessment, I was wondering if it is ...
- 21
0
votes
1
answer
344
views
Protect against unauthorized connections to the wifi network? [duplicate]
How can you prevent and detect unauthorized connections to your wifi network? What can I do as a user to protect my network?
- 105
9
votes
1
answer
428
views
Tools or recipe usable by a non-professional to check their Wifi security for common issues?
For many years I've been careful on Wifi. I haven't know how to secure it properly, so it stayed on an isolated NIC of a good router with normal WPA2-PSK and full WAN access but no LAN access at all, ...
- 1,684
1
vote
1
answer
235
views
Need Help! Computer Hacked!!!! Need to protect data
Over the past one year, I have experienced that many of my accounts (Social media accounts, email accounts) were compromised. Which includes that the perpetrator changed the password/s, had full ...
- 11
2
votes
2
answers
316
views
Isolating traffic between two physical networks on Ubuntu
I have two network segments (call them A @ 192.168.1.x and B @ 192.168.2.x) plugged into two separate NICs (NIC-A and NIC-B).
The OS on the physical machine is standard stock Ubuntu, with nothing ...
- 131
2
votes
0
answers
88
views
Protecting smart devices on my local network [closed]
I have a network of smart devices I have created, I wish to make more secure from attackers.
I have implemented a Gateway on a Data Stream Network (DSN) to allow users to access these devices and ...
- 121
2
votes
2
answers
146
views
Giving remote access via the VM, will compromise the network?
I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
- 197
0
votes
1
answer
249
views
How to verify internet access restricted
How can I reliably check in automatized way that there is no Internet access from the Windows (Server 2012 and later) instance?
I mean all possible protocols and programs.
- 115
1
vote
2
answers
8k
views
Unknown android device connecting to my wireless router even after changing wifi key several times [closed]
An unknown android device is connecting to my wireless router even after changing the wifi key several times.
How is this possible?
My router admin page doesn't have a password set.
Even though how is ...
- 129
1
vote
0
answers
434
views
How can I capture a chronological record of the clients connected to a specific standalone AP?
I want to have a chronological/historical graph showing what times each client was connected to an AP using either airodump-ng with a simple script or some other free and open tool.
- 11
0
votes
0
answers
77
views
Trustsec security
I am researching a bit on Cisco's Trustsec technology. My understanding is that it places a tag on packets based on machine and/or user ID. Trustsec can then use that tag as it traverses the network ...
- 355
1
vote
0
answers
167
views
Securing a private network: how-to [closed]
I have the following setup:
Net1 -> Router-net1 (w/firewall) -> Net2 -> firewall -> Internet
In Net1 I have several machines I use to run experiments. I would like to minimise the risk of ...
- 11
1
vote
2
answers
2k
views
The benifits of Full NAC solution VS simple radius server
In case we want to enable dot1x authentication on the wired network without using host checker,do we still need NAC solution or just simple AAA server to authenticate the host and dynamic VLAN ...
- 365