Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network-access-control]

0
votes
0answers
45 views

Should we stop using NAC for our BYOD deployment and switch to SDP?

We keep getting advice without really explaining why transferring to Software-defined perimeter is more beneficial even we use already NAC in the organization. I don't understand the reasons for this ...
1
vote
2answers
175 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
1
vote
1answer
34 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
0
votes
0answers
42 views

was PC attached? ARP spoofing, MITM, hacking, etc?

Been wanting to post this since months. Around mid March while as usual on my work PC running Windows 7, the screen blinked for a second while everything was running normally, it did this a few times, ...
22
votes
8answers
5k views

Is local admin access a danger to a properly set-up network?

I read this question: Is it common to allow local admin access for developers in organizations? This question makes me wonder. I can see how local admin access is a danger to the machine. But can a ...
3
votes
2answers
362 views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
2
votes
2answers
84 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
0
votes
0answers
35 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
3
votes
1answer
132 views

Should I allow or block wireless devices from directly communicating with each other on my LAN AP?

The question I'm asking is, like all security, a bit open-ended, and ultimately - like all security - it involves a personal balance between ease/usability vs. risk/security: Should I let users' ...
0
votes
1answer
46 views

Sharing a message broker between remote systems

We are currently exploring solutions to push/synchronize data between two systems (in two separate networks) in "near" realtime. The solutions are somewhat limited : Some kind of RPC mechanism : ...
3
votes
2answers
166 views

How to respond when network info sec check requires run of downloaded unknown .exe?

I recently visited a university for an event where I was expected to bring a computer and do work using the campus wifi. On first connection, I was asked to download a "SafeConnect Policy Key" (.exe) ...
6
votes
2answers
108 views

Network Access Control for Wireless Network

I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
2
votes
2answers
86 views

Is it possible for a network administrator to disable interactive elements on a webpage? (such as text boxes)

As part of my degree, we're currently looking at a hypothetical scenario in which internet access is introduced to prison cells. As part of the information risk assessment, I was wondering if it is ...
0
votes
1answer
107 views

Protect against unauthorized connections to the wifi network? [duplicate]

How can you prevent and detect unauthorized connections to your wifi network? What can I do as a user to protect my network?
9
votes
1answer
183 views

Tools or recipe usable by a non-professional to check their Wifi security for common issues?

For many years I've been careful on Wifi. I haven't know how to secure it properly, so it stayed on an isolated NIC of a good router with normal WPA2-PSK and full WAN access but no LAN access at all, ...
0
votes
0answers
26 views

Converting my LAN to use a correctly set up public CA and formal access control approaches?

NOTE: This is probably quite broad, and I'm looking for broad steps to take and decisions to make, in moving from informal self-signed certs to a public CA based system, with much more structured AAA. ...
1
vote
1answer
132 views

Need Help! Computer Hacked!!!! Need to protect data

Over the past one year, I have experienced that many of my accounts (Social media accounts, email accounts) were compromised. Which includes that the perpetrator changed the password/s, had full ...
2
votes
2answers
159 views

Isolating traffic between two physical networks on Ubuntu

I have two network segments (call them A @ 192.168.1.x and B @ 192.168.2.x) plugged into two separate NICs (NIC-A and NIC-B). The OS on the physical machine is standard stock Ubuntu, with nothing ...
2
votes
0answers
43 views

Protecting smart devices on my local network [closed]

I have a network of smart devices I have created, I wish to make more secure from attackers. I have implemented a Gateway on a Data Stream Network (DSN) to allow users to access these devices and ...
1
vote
2answers
86 views

Giving remote access via the VM, will compromise the network?

I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
0
votes
1answer
73 views

How to verify internet access restricted

How can I reliably check in automatized way that there is no Internet access from the Windows (Server 2012 and later) instance? I mean all possible protocols and programs.
0
votes
0answers
3k views

How to find who was remotely using my mac… Here are log files

So I walked away from my mac for about 30 minutes and when I returned someone had opened up a new Facebook tab and was uploading a picture. As soon as I was behind the computer, they stopped. It ...
1
vote
2answers
2k views

Unknown android device connecting to my wireless router even after changing wifi key several times [closed]

An unknown android device is connecting to my wireless router even after changing the wifi key several times. How is this possible? My router admin page doesn't have a password set. Even though how is ...
1
vote
0answers
387 views

How can I capture a chronological record of the clients connected to a specific standalone AP?

I want to have a chronological/historical graph showing what times each client was connected to an AP using either airodump-ng with a simple script or some other free and open tool.
0
votes
0answers
26 views

Trustsec security

I am researching a bit on Cisco's Trustsec technology. My understanding is that it places a tag on packets based on machine and/or user ID. Trustsec can then use that tag as it traverses the network ...
1
vote
0answers
114 views

Securing a private network: how-to [closed]

I have the following setup: Net1 -> Router-net1 (w/firewall) -> Net2 -> firewall -> Internet In Net1 I have several machines I use to run experiments. I would like to minimise the risk of ...
0
votes
2answers
462 views

The benifits of Full NAC solution VS simple radius server

In case we want to enable dot1x authentication on the wired network without using host checker,do we still need NAC solution or just simple AAA server to authenticate the host and dynamic VLAN ...
4
votes
1answer
529 views

Amazon Echo/Dot on your network

I have been tasked with coming up with if we should or should not allow Amazon Echo/Dot devices on our network. Below is the reasons I have come up with so far. This is still the rough list. The ...
3
votes
1answer
345 views

How does Google SQL Proxy work?

Google Cloud SQL instances are by default not exposed to the Internet. One of the connection methods supported is Cloud SQL Proxy, which is able to map the Cloud SQL instance to a local port (say, ...
1
vote
1answer
129 views

Multicast Security

Is there a way to protect devices that listen to multicast? If someone manages to get on a network where devices are listening on multicast, what prevents someone from sending packets and the devices ...
1
vote
0answers
79 views

How does an access transfer control function in a communications network work mathematically? [closed]

I read here about Lawful interception in a communications network. There is a function called access transfer control function. What is it in mathematical terms? I don't want understand the process (...
-2
votes
1answer
406 views

How can I find the external IP address of a secure network I can't access? [closed]

Is there even a way to do this? I thought you had to be on the network to get information about it. Ideally I don't want to use any sort of phishing/social-engineering attack.
0
votes
1answer
88 views

Iso 27K Implementation

Suppose we buy a new cisco router or any IT equipment. How can we employ ISO 27k/NIST 800-37/NIST 800-53 or any other related information security management standards technically? I mean what should ...
1
vote
4answers
468 views

How can I validate that VPN clients are machines owned by the company?

Employees that travel can access some of our servers through a VPN. This works fine and isn't a problem on its own. Some days ago I noticed that seemingly a VPN Client was trying to perform a portscan ...
3
votes
2answers
444 views

Minimum required processes with open ports on AWS?

I recently started an AWS box to be used for a public web site and it seems to have the following ports open... I was long ago convinced that it's a good idea to minimize the attack surface on any box ...
1
vote
1answer
95 views

Meeting room network security controls

I am aware the meeting rooms which are outside the office premises have MAC based restrictions on their LAN port. The meeting room does have a wired lan segment. what could possibly go wrong since ...
0
votes
0answers
127 views

NAC L2 IP vs NAC L3 IP vs NAC L2 802.1x

I am learning about Network Admission Control (NAC) and I came across NAC L2 IP, NAC L3 IP and NAC L2 802.1x assessment methods. What are the main differences between the three and when would one be ...
0
votes
2answers
597 views

Password protection for NetCat shell?

As a pentester, I often use NetCat, and its encrypted counterpart CryptCat. However, even CryptCat only encrypts the traffic. I'm looking for a way to keep unauthorized users from gaining access to ...
0
votes
2answers
82 views

Compromised server name and port number of a SQL Server DB Server

I would like to get an expert opinion on how dangerous is it to have the database server name and SQL server instance and port number compromised by accidentally exposing it in source code snippet ...
0
votes
0answers
43 views

Network Policy Language

I understand that network policy is simply a traffic regulation. I've seen some posts that mention policy language. Does network policy have a standard language that provides the semantics needed for ...
0
votes
1answer
70 views

Question about Standard Access Control List

According to my textbook, it states that a Standard ACL should be placed on the router interface as close to the destination as possible. I am not sure what that means unless each router gets their ...
5
votes
2answers
271 views

Identify malicious hosts in our network by sending valid domain credentials

We are currently whitelisting the hosts owned by our company on our Cisco switches to prevent private hosts in our network. This works pretty well but someone can still spoof the MAC address of his ...
3
votes
1answer
805 views

IP Spoofing between subnets

I'm new PT. In a test I was required to do, I was given a port in the segment of 172.13.x.x. I was asked to test if I'm able to reach a server at 172.16.x.x. I was wondering (considering there's ...
1
vote
2answers
48 views

Application proxy structure & functions

http://postimg.org/image/76newirnv/ For application proxy, Firstly, what does it mean "A proxy is something that acts on your behalf"? Can anyone give a more detail explanation about proxy? I read ...
0
votes
2answers
258 views

Stateful Packet Filter structure

http://postimg.org/image/o1ojanqq3/ For stateful packet filter, Firstly, why is cannot see application data being one of the disadvantages of Stateful Packet Filter? Secondly, how can stateful ...
0
votes
1answer
105 views

Packet Filter with Access Control List

http://i66.tinypic.com/29p50zp.png Can anyone explain how to read and understand row 1,2 and 3? My understanding for row 1 is : If any inside packets want to go to outside via any source port to ...
4
votes
2answers
235 views

Certificate handling on a small network VPN

Background - I need to set up secure remote access for a small home office. I'm a bit of a noob and haven't needed to handle certificates before. I understand most of the setup but I want to ...
10
votes
1answer
2k views

unauthorized logging into my computer

I ve been suspecting someone logging into my computer because a couple of times, during the user log on screen I saw "Signed in remotely from.." The first timeIi saw some of my pictures copied on ...
3
votes
1answer
85 views

Could this piece of code be harmful ?

I just wrote these 2 functions in C#.net and it can get any user's system IP and MAC address. Isn't this harmful since I got help from microsoft documentation. Could these lead to potential damage or ...
1
vote
3answers
519 views

Is there a way to isolate every device on my network?

As it is every device on my network and every app on those devices could be hacking my other devices on my network. The app I just downloaded to my iPhone might be looking for known exploits in my ...