Skip to main content

Questions tagged [network-access-control]

Filter by
Sorted by
Tagged with
0 votes
1 answer
40 views

Whitelist at network level, application level, or both?

I have a public-facing SFTP instance. When applying the whitelist/allow-list of IP addresses that are allowed to connect to this instance, should I enforce the list on the network/firewall level, the ...
PorLosTacos's user avatar
0 votes
1 answer
113 views

How to prevent spam attacks from rotating proxies

My website has hundreds of thousands of html pages that are open to public. Each time a html page is requested, a call will be made to my database to get the correct data. Therefore the cost of each ...
Tuan Do's user avatar
0 votes
0 answers
84 views

Perimeter IP Address Blocking

Currently we have a Palo Alto FW that serves as our perimeter devices for our network. We are required by our contract to block certain IP addresses. Over time this list has grown to almost 150k ...
Jon19992's user avatar
1 vote
1 answer
105 views

How to prevent AD object information export by a LDAP Export tool from workgroup computer

I have a question regarding Active Directory Security. I can export Active Directory Object information by any 3rd party LDAP Export tool from any workgroup computer which is connected in my network. ...
Md. Rubiat Haque's user avatar
0 votes
0 answers
99 views

Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS?

Can I setup and enforce additional WiFi connection (and password) requirements on managed laptops using Windows or MacOS? Such as: blocking (or entirely hiding) the option to connect to open networks ...
Bob Ortiz's user avatar
  • 6,685
3 votes
1 answer
543 views

Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?

Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is ...
Bob Ortiz's user avatar
  • 6,685
1 vote
1 answer
117 views

What are the risks with PPTP (MS-CHAPV1/V2)?

What are the risks with PPTP (MS-CHAPV1/V2)? Are the only ways that it can be exploited are if someone already has access to the network and can ARP poison etc or capture packets some way? Or can it ...
Floppa's user avatar
  • 11
1 vote
1 answer
327 views

Does my ISP sees that I am using someone else's PPPoE username/password?

I want to ask that does my ISP will be able to see that I am using username/password of someone else on my dialup PPPoE.
Hamza's user avatar
  • 13
2 votes
1 answer
151 views

Does opening an IPsec tunnel compromise the rest of my VPN?

Let's assume: I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed) My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
user2530062's user avatar
3 votes
1 answer
414 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
ZPlaya7's user avatar
  • 33
1 vote
1 answer
168 views

What is the exact security benefit of disconnected environments?

In large organizations, I often see sysadmins mirroring all the stuff they need from the internet locally (container images, rpm and deb packages) for local consumption, with the burden of keeping the ...
Manu's user avatar
  • 111
2 votes
1 answer
328 views

Blocking outbound connections to mitigate CVE-2021-44228 log4j?

As I understand it, a successful exploit requires a connection to an external server to download a payload. If a device can't be patched or otherwise mitigated, does restricting its outbound access ...
poke's user avatar
  • 375
1 vote
0 answers
169 views

How can I enforce a security sandbox with any process?

Deno (the node.js fork) is designed to be secure by default. Therefore, unless you specifically enable it, a program run with Deno has no file, network, or environment access. Deno has a set of ...
cphoover's user avatar
  • 111
22 votes
6 answers
5k views

Do machines without any listening services need a firewall to block incoming connections?

Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
Mikhail Morfikov's user avatar
3 votes
1 answer
782 views

Setup network with IoT devices

I bought a new router and I'm thinking to make my network a bit smarter from the security aspect. My question is now: How can I make sure that an attacker cannot get into my "secure" network ...
rekire's user avatar
  • 133
0 votes
1 answer
381 views

expose home applications to the internet

I have some web applications (for example jupyter notebook) running on my home pc (ubuntu) that sometimes I would like to access remotely. What would be an efficient and safe method to do it? I don't ...
user60108's user avatar
  • 187
3 votes
0 answers
2k views

Unknown device on my home's local network. What to do about it?

My home router's configuration interface shows a device I don't know, connected via WiFi to my local network. According to the router's history, that device connected to it several days ago. It is ...
Hey's user avatar
  • 1,945
0 votes
0 answers
176 views

Why is DOCSIS 4.0 implementing weak security protocols?

So I had a look at the latest DOCSIS 4.0 Security Implementation paper here https://www.cablelabs.com/technologies/docsis-4-0-technology I found that they’re implementing SHA -1 and 3DES for security. ...
Rob's user avatar
  • 1
0 votes
2 answers
267 views

Are there any examples of network-based application firewalls?

As we know, network based firewalls will filter based on information such as source IP, source port, etc. But they won't know what program on the source machine is generating that traffic. ...
Synthetic Ascension's user avatar
1 vote
1 answer
143 views

Security team making the firewall opening, good pratice? [closed]

I'm currently requested in my enterprise to do myself (security team) the firewall overtures requests in TUFIN (firewall workflow), instead of our local IT team. it's for simplicity and saving costs. ...
user avatar
0 votes
2 answers
1k views

How one can find I am using virtual box Virtual Machine linux through Anydesk remote application?

I recently created a virtualbox virtual machine of Ubuntu 18.04 and installed Anydesk remote desktop app in it. An IT guy accessed my computers desktop via Anydesk app, but he is actually inside the ...
Electro Voyager's user avatar
2 votes
1 answer
473 views

Best Firewall Zone Settings for Security Gli-net Routers

I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel. What would be the ...
Luke F's user avatar
  • 53
0 votes
0 answers
339 views

How to do a SSL MITM for all programs trying to access the internet on my local Ubuntu

How to do an SSL MITM for all programs trying to access the internet on my local Ubuntu. When a program on my local machine tries to access the internet using https I would like to intercept and ...
Tim's user avatar
  • 103
2 votes
1 answer
641 views

Access Control Lists - Why block a port rather than block a protocol?

I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example: "if you want to block HTTP traffic,...
Jeremy P's user avatar
12 votes
3 answers
4k views

Is a global DNS record a security risk for phpMyAdmin?

Services like phpMyadmin needs a domain name to access. Instead of adding a global DNS record, one could make a local DNS record (e.g. in /etc/hosts) to access the site. Would it increase security if ...
Arun Killu's user avatar
0 votes
1 answer
520 views

Stateless Firewall configuration and random port number from server

When I was reading about web servers, I came to know that though servers listen to static port (say port 80 for http), immediately after the connection, they assign a different port and thread to ...
SRaj's user avatar
  • 155
0 votes
3 answers
209 views

What hardware and or software do I need in order to limit outbound traffic?

I have a situation where my users need to be able to access the internet and search engines to be able to perform their jobs. My problem is that I need to prevent them from being able to upload files ...
Tony Sullivan's user avatar
2 votes
1 answer
279 views

Was the Raspberry Pi-related NASA JPL network breach primarily caused by the failure to keep an updated list of authorized devices?

The question What information was stolen from JPL during the Raspberry Pi hack? refers to an event in recent news (e.g. Engadget's A rogue Raspberry Pi helped hackers access NASA JPL systems) and ...
uhoh's user avatar
  • 1,409
1 vote
1 answer
93 views

Extending on-premise security to a virtual machine used in Home Office environment

The environment Our company has a reasonable (from the point of view of a regular employee) security policy consisting of, among other things: Sophos suite covering both local antivirus solution and ...
Pavel's user avatar
  • 213
1 vote
1 answer
2k views

NAC bypass with MAC spoofing

I just started my job as a penetration tester. Me and my mentor got to the client's office and our first order of business was to bypass the NAC system. Searching for a printer or other similar ...
user avatar
1 vote
0 answers
122 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
blackpine's user avatar
1 vote
2 answers
264 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
김승재's user avatar
1 vote
2 answers
199 views

How does Software Defined Perimeter (SDP) protect against certains attack that happen in the browser?

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks. On Wikipedia it says that it can protect ...
jnbdz's user avatar
  • 111
21 votes
8 answers
9k views

Is local admin access a danger to a properly set-up network?

I read this question: Is it common to allow local admin access for developers in organizations? This question makes me wonder. I can see how local admin access is a danger to the machine. But can a ...
Belle's user avatar
  • 315
6 votes
2 answers
7k views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
thisguy123's user avatar
2 votes
2 answers
2k views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
bretonics's user avatar
  • 121
0 votes
0 answers
119 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
Ivana's user avatar
  • 89
3 votes
1 answer
1k views

Should I allow or block wireless devices from directly communicating with each other on my LAN AP?

The question I'm asking is, like all security, a bit open-ended, and ultimately - like all security - it involves a personal balance between ease/usability vs. risk/security: Should I let users' ...
Stilez's user avatar
  • 1,694
0 votes
1 answer
392 views

Sharing a message broker between remote systems

We are currently exploring solutions to push/synchronize data between two systems (in two separate networks) in "near" realtime. The solutions are somewhat limited : Some kind of RPC mechanism : ...
Michael Técourt's user avatar
3 votes
2 answers
275 views

How to respond when network info sec check requires run of downloaded unknown .exe?

I recently visited a university for an event where I was expected to bring a computer and do work using the campus wifi. On first connection, I was asked to download a "SafeConnect Policy Key" (.exe) ...
WBT's user avatar
  • 556
6 votes
2 answers
212 views

Network Access Control for Wireless Network

I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
Manikhokher's user avatar
2 votes
2 answers
207 views

Is it possible for a network administrator to disable interactive elements on a webpage? (such as text boxes)

As part of my degree, we're currently looking at a hypothetical scenario in which internet access is introduced to prison cells. As part of the information risk assessment, I was wondering if it is ...
Aeobrix's user avatar
  • 21
0 votes
1 answer
376 views

Protect against unauthorized connections to the wifi network? [duplicate]

How can you prevent and detect unauthorized connections to your wifi network? What can I do as a user to protect my network?
Gintas's user avatar
  • 105
9 votes
1 answer
473 views

Tools or recipe usable by a non-professional to check their Wifi security for common issues?

For many years I've been careful on Wifi. I haven't know how to secure it properly, so it stayed on an isolated NIC of a good router with normal WPA2-PSK and full WAN access but no LAN access at all, ...
Stilez's user avatar
  • 1,694
1 vote
1 answer
264 views

Need Help! Computer Hacked!!!! Need to protect data

Over the past one year, I have experienced that many of my accounts (Social media accounts, email accounts) were compromised. Which includes that the perpetrator changed the password/s, had full ...
user164254's user avatar
2 votes
2 answers
365 views

Isolating traffic between two physical networks on Ubuntu

I have two network segments (call them A @ 192.168.1.x and B @ 192.168.2.x) plugged into two separate NICs (NIC-A and NIC-B). The OS on the physical machine is standard stock Ubuntu, with nothing ...
Goro's user avatar
  • 131
2 votes
0 answers
109 views

Protecting smart devices on my local network [closed]

I have a network of smart devices I have created, I wish to make more secure from attackers. I have implemented a Gateway on a Data Stream Network (DSN) to allow users to access these devices and ...
sgript's user avatar
  • 121
2 votes
2 answers
182 views

Giving remote access via the VM, will compromise the network?

I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
Cin Sb Sangpi's user avatar
0 votes
1 answer
395 views

How to verify internet access restricted

How can I reliably check in automatized way that there is no Internet access from the Windows (Server 2012 and later) instance? I mean all possible protocols and programs.
SerG's user avatar
  • 115
1 vote
2 answers
8k views

Unknown android device connecting to my wireless router even after changing wifi key several times [closed]

An unknown android device is connecting to my wireless router even after changing the wifi key several times. How is this possible? My router admin page doesn't have a password set. Even though how is ...
Rahul Yadav's user avatar