Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 2374

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

57 votes
3 answers
274k views

What is the real function and use of a DMZ on a network?

I read the article on Wikipedia describing what a DMZ (demilitarized zone) is on a network, but am still failing to grasp both how it is set up (ie: is it within the main network or sequestered away?) … Can anyone explain to me why I'd like to have a DMZ on my network, given the following setup: I have around 10 client computer devices on the network, some of which host SSH. …
Naftuli Kay's user avatar
  • 6,843
3 votes
3 answers
402 views

What are reasons why one shouldn't run Tor at a network level?

I've been considering proxying all web traffic on my network transparently through Tor and dividing up my bandwidth to share with the rest of the Tor network. … I'm particularly concerned about running Tor network-wide and seeing greater security threats open up as a result of it. …
Naftuli Kay's user avatar
  • 6,843
13 votes

Are consumer-grade routers any more or less vulnerable?

What you'll likely want to do is setup your network like this: Note that "Network Partition" and "Server DMZ" don't have to be physical devices, but can be. … Managing a network is something I believe you don't want to be a full-time job. Hope this is helpful. …
Naftuli Kay's user avatar
  • 6,843
4 votes
3 answers
1k views

Segregating a Printer in my Enterprise Network

The printer is connected to my EAP-TLS network, which allows hosts to talk with one another, provided that they're in that network or connected directly to ethernet. … If someone has gotten into my EAP-TLS network, generally they should be there, but I greatly fear the security hell that this printer could possibly unleash in my network. What can I do? …
Naftuli Kay's user avatar
  • 6,843
8 votes
5 answers
12k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

Is this accurate, meaning that a WPA2 Enterprise WiFi network is just as susceptible as a WPA2 PSK network to brute-force and dictionary/pre-computed attack? … In fact, wouldn't it mean that a WPA2 Enterprise network is more susceptible to such an attack as the number of users increase? It doesn't appear too difficult to setup an authentication service. …
Naftuli Kay's user avatar
  • 6,843