2022 Developer Survey is open! Take survey.

Questions tagged [network-access-control]

Filter by
Sorted by
Tagged with
0 votes
0 answers
67 views

How are scam call centers cctv stream easily hacked by scam baiters

Recently i have been seeing the videos of fake call centers being busted by scam baiters like Mark Rober In all of these videos the scam baiters are easily able to hack into the the network camera ...
user avatar
0 votes
1 answer
99 views

Why don’t routers request permission when attempting to connect to an unknown address? (Or why do they still assume every connection is trustworthy?)

I’m imagining a system similar to UAC on Windows but implemented at the router level for IP addresses instead. (Or AS numbers, BGP numbers, Port number, etc…) Naturally this makes router setup ...
user avatar
  • 101
3 votes
1 answer
128 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
user avatar
  • 33
0 votes
1 answer
80 views

What is the exact security benefit of disconnected environments?

In large organizations, I often see sysadmins mirroring all the stuff they need from the internet locally (container images, rpm and deb packages) for local consumption, with the burden of keeping the ...
user avatar
  • 101
2 votes
1 answer
144 views

Blocking outbound connections to mitigate CVE-2021-44228 log4j?

As I understand it, a successful exploit requires a connection to an external server to download a payload. If a device can't be patched or otherwise mitigated, does restricting its outbound access ...
user avatar
  • 365
1 vote
0 answers
82 views

How can I enforce a security sandbox with any process?

Deno (the node.js fork) is designed to be secure by default. Therefore, unless you specifically enable it, a program run with Deno has no file, network, or environment access. Deno has a set of ...
user avatar
  • 111
21 votes
6 answers
4k views

Do machines without any listening services need a firewall to block incoming connections?

Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
user avatar
3 votes
1 answer
197 views

Setup network with IoT devices

I bought a new router and I'm thinking to make my network a bit smarter from the security aspect. My question is now: How can I make sure that an attacker cannot get into my "secure" network ...
user avatar
  • 133
0 votes
1 answer
166 views

expose home applications to the internet

I have some web applications (for example jupyter notebook) running on my home pc (ubuntu) that sometimes I would like to access remotely. What would be an efficient and safe method to do it? I don't ...
user avatar
  • 159
3 votes
0 answers
1k views

Unknown device on my home's local network. What to do about it?

My home router's configuration interface shows a device I don't know, connected via WiFi to my local network. According to the router's history, that device connected to it several days ago. It is ...
user avatar
  • 1,905
0 votes
0 answers
99 views

Why is DOCSIS 4.0 implementing weak security protocols?

So I had a look at the latest DOCSIS 4.0 Security Implementation paper here https://www.cablelabs.com/technologies/docsis-4-0-technology I found that they’re implementing SHA -1 and 3DES for security. ...
user avatar
  • 1
0 votes
2 answers
201 views

Are there any examples of network-based application firewalls?

As we know, network based firewalls will filter based on information such as source IP, source port, etc. But they won't know what program on the source machine is generating that traffic. ...
user avatar
1 vote
1 answer
102 views

Security team making the firewall opening, good pratice? [closed]

I'm currently requested in my enterprise to do myself (security team) the firewall overtures requests in TUFIN (firewall workflow), instead of our local IT team. it's for simplicity and saving costs. ...
user avatar
0 votes
2 answers
845 views

How one can find I am using virtual box Virtual Machine linux through Anydesk remote application?

I recently created a virtualbox virtual machine of Ubuntu 18.04 and installed Anydesk remote desktop app in it. An IT guy accessed my computers desktop via Anydesk app, but he is actually inside the ...
user avatar
1 vote
1 answer
282 views

Best Firewall Zone Settings for Security Gli-net Routers

I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel. What would be the ...
user avatar
  • 33
0 votes
0 answers
195 views

How to do a SSL MITM for all programs trying to access the internet on my local Ubuntu

How to do an SSL MITM for all programs trying to access the internet on my local Ubuntu. When a program on my local machine tries to access the internet using https I would like to intercept and ...
user avatar
  • 103
2 votes
1 answer
284 views

Access Control Lists - Why block a port rather than block a protocol?

I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example: "if you want to block HTTP traffic,...
user avatar
12 votes
3 answers
4k views

Is a global DNS record a security risk for phpMyAdmin?

Services like phpMyadmin needs a domain name to access. Instead of adding a global DNS record, one could make a local DNS record (e.g. in /etc/hosts) to access the site. Would it increase security if ...
user avatar
0 votes
1 answer
207 views

Stateless Firewall configuration and random port number from server

When I was reading about web servers, I came to know that though servers listen to static port (say port 80 for http), immediately after the connection, they assign a different port and thread to ...
user avatar
  • 155
0 votes
3 answers
175 views

What hardware and or software do I need in order to limit outbound traffic?

I have a situation where my users need to be able to access the internet and search engines to be able to perform their jobs. My problem is that I need to prevent them from being able to upload files ...
user avatar
2 votes
1 answer
235 views

Was the Raspberry Pi-related NASA JPL network breach primarily caused by the failure to keep an updated list of authorized devices?

The question What information was stolen from JPL during the Raspberry Pi hack? refers to an event in recent news (e.g. Engadget's A rogue Raspberry Pi helped hackers access NASA JPL systems) and ...
user avatar
  • 1,375
1 vote
1 answer
64 views

Extending on-premise security to a virtual machine used in Home Office environment

The environment Our company has a reasonable (from the point of view of a regular employee) security policy consisting of, among other things: Sophos suite covering both local antivirus solution and ...
user avatar
  • 213
0 votes
1 answer
1k views

NAC bypass with MAC spoofing

I just started my job as a penetration tester. Me and my mentor got to the client's office and our first order of business was to bypass the NAC system. Searching for a printer or other similar ...
user avatar
1 vote
0 answers
91 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
user avatar
1 vote
2 answers
234 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
user avatar
1 vote
2 answers
158 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
user avatar
  • 111
22 votes
8 answers
8k views

Is local admin access a danger to a properly set-up network?

I read this question: Is it common to allow local admin access for developers in organizations? This question makes me wonder. I can see how local admin access is a danger to the machine. But can a ...
user avatar
  • 325
6 votes
2 answers
5k views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
user avatar
2 votes
2 answers
515 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
user avatar
  • 121
0 votes
0 answers
86 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
user avatar
  • 139
3 votes
1 answer
935 views

Should I allow or block wireless devices from directly communicating with each other on my LAN AP?

The question I'm asking is, like all security, a bit open-ended, and ultimately - like all security - it involves a personal balance between ease/usability vs. risk/security: Should I let users' ...
user avatar
  • 1,664
0 votes
1 answer
287 views

Sharing a message broker between remote systems

We are currently exploring solutions to push/synchronize data between two systems (in two separate networks) in "near" realtime. The solutions are somewhat limited : Some kind of RPC mechanism : ...
user avatar
3 votes
2 answers
244 views

How to respond when network info sec check requires run of downloaded unknown .exe?

I recently visited a university for an event where I was expected to bring a computer and do work using the campus wifi. On first connection, I was asked to download a "SafeConnect Policy Key" (.exe) ...
user avatar
  • 556
6 votes
2 answers
168 views

Network Access Control for Wireless Network

I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
user avatar
2 votes
2 answers
141 views

Is it possible for a network administrator to disable interactive elements on a webpage? (such as text boxes)

As part of my degree, we're currently looking at a hypothetical scenario in which internet access is introduced to prison cells. As part of the information risk assessment, I was wondering if it is ...
user avatar
  • 31
0 votes
1 answer
295 views

Protect against unauthorized connections to the wifi network? [duplicate]

How can you prevent and detect unauthorized connections to your wifi network? What can I do as a user to protect my network?
user avatar
  • 105
9 votes
1 answer
360 views

Tools or recipe usable by a non-professional to check their Wifi security for common issues?

For many years I've been careful on Wifi. I haven't know how to secure it properly, so it stayed on an isolated NIC of a good router with normal WPA2-PSK and full WAN access but no LAN access at all, ...
user avatar
  • 1,664
1 vote
1 answer
224 views

Need Help! Computer Hacked!!!! Need to protect data

Over the past one year, I have experienced that many of my accounts (Social media accounts, email accounts) were compromised. Which includes that the perpetrator changed the password/s, had full ...
user avatar
2 votes
2 answers
254 views

Isolating traffic between two physical networks on Ubuntu

I have two network segments (call them A @ 192.168.1.x and B @ 192.168.2.x) plugged into two separate NICs (NIC-A and NIC-B). The OS on the physical machine is standard stock Ubuntu, with nothing ...
user avatar
  • 131
2 votes
0 answers
83 views

Protecting smart devices on my local network [closed]

I have a network of smart devices I have created, I wish to make more secure from attackers. I have implemented a Gateway on a Data Stream Network (DSN) to allow users to access these devices and ...
user avatar
  • 121
2 votes
2 answers
140 views

Giving remote access via the VM, will compromise the network?

I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
user avatar
0 votes
1 answer
120 views

How to verify internet access restricted

How can I reliably check in automatized way that there is no Internet access from the Windows (Server 2012 and later) instance? I mean all possible protocols and programs.
user avatar
  • 115
1 vote
2 answers
7k views

Unknown android device connecting to my wireless router even after changing wifi key several times [closed]

An unknown android device is connecting to my wireless router even after changing the wifi key several times. How is this possible? My router admin page doesn't have a password set. Even though how is ...
user avatar
1 vote
0 answers
430 views

How can I capture a chronological record of the clients connected to a specific standalone AP?

I want to have a chronological/historical graph showing what times each client was connected to an AP using either airodump-ng with a simple script or some other free and open tool.
user avatar
  • 11
0 votes
0 answers
66 views

Trustsec security

I am researching a bit on Cisco's Trustsec technology. My understanding is that it places a tag on packets based on machine and/or user ID. Trustsec can then use that tag as it traverses the network ...
user avatar
1 vote
0 answers
163 views

Securing a private network: how-to [closed]

I have the following setup: Net1 -> Router-net1 (w/firewall) -> Net2 -> firewall -> Internet In Net1 I have several machines I use to run experiments. I would like to minimise the risk of ...
user avatar
  • 11
0 votes
2 answers
1k views

The benifits of Full NAC solution VS simple radius server

In case we want to enable dot1x authentication on the wired network without using host checker,do we still need NAC solution or just simple AAA server to authenticate the host and dynamic VLAN ...
user avatar
  • 333
3 votes
1 answer
848 views

Amazon Echo/Dot on your network

I have been tasked with coming up with if we should or should not allow Amazon Echo/Dot devices on our network. Below is the reasons I have come up with so far. This is still the rough list. The ...
user avatar
3 votes
2 answers
2k views

How does Google SQL Proxy work?

Google Cloud SQL instances are by default not exposed to the Internet. One of the connection methods supported is Cloud SQL Proxy, which is able to map the Cloud SQL instance to a local port (say, ...
user avatar
  • 283
2 votes
1 answer
267 views

Multicast Security

Is there a way to protect devices that listen to multicast? If someone manages to get on a network where devices are listening on multicast, what prevents someone from sending packets and the devices ...
user avatar
  • 3,086