Questions tagged [security]

A general purpose tag to mark discussions of general security topics including firewalls, ACLs, AAA and numerous others related to keeping the network safe from unauthorized access.

Filter by
Sorted by
Tagged with
1
vote
1answer
80 views

Sensor to collector communication from SPAN, Inline or TAP

I am trying to figure out which one of the three modes or all would support this. The sensor is a computer running fprobe and pushing UDP traffic (netflow v5) to an IP address in the network. My ...
1
vote
1answer
457 views

What is the ports that I should close in firewall to protect my LAN?

I use a firewall with two interfaces to protect my network but I don't know witch ports to close or open in LAN and WAN interface ? thanks for your help !!
1
vote
2answers
88 views

Isolating a workstation on a network for remote access by contractors

Is it possible to isolate a computer on a network such that it can be accessed remotely by contractors, but not have access to any of the other machines on the network in any way? I understand it ...
1
vote
2answers
401 views

Does a VPN service “anonymize” a mobile connection just as much as a landline connection?

I recently read about a proposal by the military government in Thailand to make tourist SIM-cards "trackable". That got me thinking about security when accessing the Internet via a mobile connection ...
1
vote
2answers
355 views

How can I access switch port protected by 802.1X thats in a seperate collision domain seperated by a T1 bridge

I want to be able to remotely access an Ethernet switch-port protected by 802.1x. The switch I want to access is at a distant site, but I have a T1 circuit that goes from that site to my office. I ...
1
vote
0answers
36 views

Dedicated Internet Router or VRF on L3? [closed]

I need to route public networks on our equipment. I plan to use existing 4500X and create a new vrf PUBLIC. There are already other vrf's existing handling internal traffic. [ISP RTR]+---/30-Network-...
1
vote
1answer
139 views

Cisco ASA access list on interface on which cryptomap is applied [closed]

I am a newbie with Cisco ASA and I have a question. Thank you in advance for answering. Take a Cisco ASA that has an internet facing interface. On this interface a cryptomap is configured with some ...
1
vote
0answers
118 views

How an MKA key server decides if it shall use MACSec and how it announce that?

According to IEEE 802.1X-2010 the standard for defining MACSec Key agreement protocol Clause 9.6, that's how the key-server decides to use MACSec or no. Each participant advertises whether it is ...
1
vote
0answers
643 views

How are required Keys inside MACSec Key agreement protocol (MKA) generated?

I am trying to wrap my head around MACSec Key agreement protocol (MKA) and its relation with MACSec and other protocols. So bear with me. To my understanding in order to MACSec to work, all nodes ...
1
vote
0answers
39 views

What are some options to replace a computer that is dual homed on 2 separate VLAN's? [closed]

One is a "secure" VLAN, the other is a "house" VLAN. At some point, a workflow was developed in which a decision was made that sales staff needed to take some of their materials received from clients ...
1
vote
0answers
146 views

Monitoring interfaces on VyOS then SSH output to another machine (Security Onion) [closed]

I am trying to figure out the best way I can monitor interfaces on a VyOS interface from a Security Onion instance using Squil (Snort alerts etc). I am thinking SSH to VyOS to activate monitor ...
1
vote
2answers
107 views

How to block outside initiated traffic in NPTv6?

NPTv6 does prefix translation between one IPv6 address to another. Is there a way to prevent outside initiated traffic to inside (preferably in A10 AX devices)?
1
vote
1answer
269 views

Client security using UDP

Introduction I am currently trying to build up a networking layer for Unity from scratch. Currently I am testing the communication via UDP using Node.js for the server and the client. However I guess ...
1
vote
0answers
268 views

Effects of ip options drop command on Cisco 4507 Device

Are there any services or applications traversing a router that will be impacted by the command, "ip options drop"? I know the router warns about RSVP when you input this command, but this 4510 is not ...
1
vote
0answers
60 views

Cyberoam Internet Issue

I have a security problem on my network, sometimes some computers are disconecting from internet, when i visualised log files of my cyberoam , i found in top domains some adresses not recognised like ...
1
vote
1answer
875 views

Cyberoam : Issue Web Filter Policy

I am a beginner, I want to Block a Specific Website in cyberoam I have followed this tutorial : Block a Specific Website to block a Specific Website in cyberoam. the first URL has been blocked ...
1
vote
0answers
115 views

preventing network sniffing and eavesdropping using ping

We are using ping on the connection between aserver and the client pc, to check if there is an interruption, probably caused by sniffing or eavesdropping devices. During the ping, it will run a code ...
1
vote
0answers
68 views

How to proceed for research on Network security? [closed]

It may out of scope but I have to research on Network security. I have worked on Signal Processing in Time-Frequency down during Post Graduation research and have few publication. Now my interest ...
1
vote
0answers
76 views

How to make NMAP command steady and the fastest possible?

I want to make an IP scan using NMAP, but the operating time varies for some reason. The command can be executed in 2 seconds, and if I launch it again just after, it can take 30 seconds. This is the ...
1
vote
0answers
41 views

Securing WLAN using one time authentication [closed]

We have a wireless SSID for Managers which I need to secure using one time authentication. Currently we are using MAC filtering but it is insecure. So I am wondering if there is a certificate based ...
1
vote
0answers
337 views

wpa-aes EAP-peap authentication problem

I'm trying to connect ubiquity NanoStation M2 as Station/Router mode to a hotspot that I believe has WPA/AES security and EAP-PEAP for auth. I have tested the username and password from my laptop and ...
1
vote
1answer
119 views

Opinion on techinique to solve arp poisoning

I have been researching about prevention of ARP spoofing in an individual's device (smart phone or laptop) in a public network. If we save the MAC address of the default gateway at the time of ...
0
votes
2answers
2k views

NAT vs PAT Security

i don't know if i have duplicated a questions..but then i still want to ask which one is more risky to be deploy in networking will it be PAT or NAT PAT will make it risky for routing as it will ...
0
votes
1answer
70 views

Why don't most routers automatically update their firmware? [closed]

Recently I realised that my new router's firmware was outdated. Searching a bit, I found out that most routers need to be manually updated to a new version of firmware. Running an old firmware could ...
0
votes
3answers
557 views

Is there an “active” network tap (not just passive)? [closed]

Passive network taps seem to be pretty simple. What if I want an "active" network tap? Let's say I want to change some HTTP packets, for example add info etc. Another thing that would interest my ...
0
votes
1answer
43 views

Multicast in enterprise network

Once I have heard from a professional that multicast is forbidden (or not suggested or not allowed) in enterprise networks from 2014. (He referenced to a standard or recommendation document or ...
0
votes
1answer
71 views

Trade Floor Network Design Feedback [closed]

I have an assignment that I am working on. Now I admit, I am far from knowledgeable and I have nowhere to turn to for help at the moment. I am not asking for someone to complete the assignment for me, ...
0
votes
1answer
837 views

How does ingress filtering protect against legitimate spoof packets?

I am learning about Ingress Filtering where unauthorised packets are filtered out from entering the network. To get a better understanding of it , I found an article which said: the system ...
0
votes
1answer
40 views

What is the difference between VPN and Domain fronting?

What is Domain fronting? and how it is different from a VPN?
0
votes
1answer
17 views

Session, presentation and application layer

I almost finished the ccna, in the meantime I'm following Pentesting courses, I noticed enough interesting protocols at the session level. I wish I could understand them as I did with cisco, but I ...
0
votes
1answer
54 views

Is it possible for a spy to send 100 Peta Byte of secret data securely online? [closed]

Suppose a spy in an enemy country has got access to 100 or more Peta Byte of top secret data. He wants to pass on the data to his headquarters. But he also wants to make sure that at no cost the data ...
0
votes
1answer
18 views

Are Port Numbers Strictly Attached to the Protocol? [duplicate]

I was playing around with hosting a local webserver, and decided to host it on port 53 as an experiment. Turns out I was able to make an HTTP GET request to localhost:53 without any issues (using ...
0
votes
1answer
27 views

Is Network Bridging secure [closed]

Bridging two network cars in Windows allows the two separate networks to connect. Assuming there are three NIC cards present in a machine: A, B and C. If I bridge NIC A and B, is there a possibility ...
0
votes
1answer
56 views

How to change ip TTL=1 on flat network for security [closed]

Working on a network at an high rise apartment complex. They have a core router/firewall acting as dhcp server and about 7 switches (all l3 switches). They have a few vlans to segment traffic based of ...
0
votes
1answer
40 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
64 views

D-link managed switch or Cisco managed switch? [closed]

Can anyone tell me the difference between D-link managed switch and cisco managed switch? And why we go for cisco managed switch.
0
votes
1answer
36 views

Getting “public” IP's while keeping firewall enabled [closed]

Current situation: The internet available to me is a shared router that I do not have administrative access to. If really needed I could reset the password but I rather not. I plugged in a network ...
0
votes
1answer
26 views

Is it possible for secure third-party peering at wireless access points? [closed]

If the question title doesn't make sense, please forgive me, I'm not a networking person. I will try to describe what I mean: When you view your available networks on your computer, some are your ...
0
votes
1answer
29 views

How is a message digest decrypted? [closed]

Trying to get my head around digital signatures and hit a slight block. The book I am using gives the following information Device A hashes a message to create a message digest Device A encrypts the ...
0
votes
1answer
557 views

browsing via remote access to my PC with TeamViewer. Can sites track my original IP?

I have a PC connected to the internet with IP#1. I remotely access it to connect to websites from my other PC IP#2 via teamviewer. obviously sites can see IP#1 but is it possible for them to track the ...
0
votes
0answers
17 views

Why is my network camera visible from outside the LAN? [closed]

I'm using a network camera (IPCAM), connected by wifi to a Netgear (Nighthawk 8000) router which is behind a Comcast cablemodem. I just found out that on my cell phone, running the CAMHi app (made by ...
0
votes
0answers
26 views

Compatible peap+freeradius+openldap

On my new job I have inherited a service wpa2-enterprice with peap+freeradius+openldap. As NAS we use ArubaIAP with enabled function "eap-termination". And this bundle works well! Little deep: In ...
0
votes
0answers
13 views

Is Dish Fiber's network security as horrible as i think it is? [closed]

I recently moved into a new apartment building. It was just built a year or two ago and came pre-wired with fiber and there's a mesh wifi network provided by Dish Fiber. So far my impression of their ...
0
votes
0answers
47 views

Will VLAN agnostic devices listen to VLAN tagged packets?

I have a network that looks kind of like this: We have a shared physical network between guest and operations that I keep segregated by VLANs. My knee jerk was to keep all "operations" devices on ...
0
votes
0answers
19 views

Using USG as firewall with Draytek, have i made a mistake?

something is bothering me with the way i set up a network, this is the setup. I am using Vigor 2862 and Ubiquiti USG Firewall Location 1 Draytek router connected to ADSL Secure LAN to LAN VPN to ...
0
votes
1answer
49 views

How to implement port security in SDN using pox controller and ovs?

How can I defend against DHCP starvation attacks or MAC spoofing in an SDN environment?
0
votes
1answer
102 views

Implications of ipv6 on LAN security [duplicate]

I'm not sure whether this is really the correct place to post this question, because it's not really about a "professional" setting. However, I have the standard setup with computers behind a netgear ...
0
votes
1answer
68 views

Is it possible to auto update router firewall filter?

Developer here, not a sysadmin. After reading over my firewall logs and seeing (assuming bot inititied) DROP entries, I'd like to script something to auto-update my firewall settings to deny their ...
-1
votes
2answers
72 views

Is “port-forwarding” used just for comfort?

If I can easely bind some computer in internal network to a port on the router by code - so its right to say that we need "port-forwording" only for cases that it easier to us then build a new ...
-1
votes
1answer
305 views

Can't Configure CISCO ASA 5505 firewall

HELP ME..!!!! I want to Design my Network as like as Below. I tried several times but Failed (Failed to ping Web server from my Local LAN and also from LAN). My configuration is: interface Vlan1 ...