Questions tagged [security]

A general purpose tag to mark discussions of general security topics including firewalls, ACLs, AAA and numerous others related to keeping the network safe from unauthorized access.

Filter by
Sorted by
Tagged with
1
vote
1answer
481 views

Multiple DHCP Offers - Which is selected? [closed]

I have created a testing scenario in VMWare for a man in the middle attack using DHCP spoofing. It's for a college project. Windows 8 machine bridged to host adapter Kali linux bridged to host ...
1
vote
1answer
171 views

Cisco ASA looping broadcast packet

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN ...
1
vote
1answer
60 views

SDN Flow-modification attack

What are the steps that can be taken to prevent flow-modification attacks on an SDN controller? The attack would look as follows(As seen by the image): Does OpenDaylight or any other controller have ...
1
vote
1answer
225 views

Cisco ASA not passing traffic between two interface

I have Cisco 5506 with Security Plue License and following is my configuration. interface GigabitEthernet1/1 nameif inside security-level 100 ip address 10.0.10.1 255.255.255.0 ! interface ...
1
vote
1answer
52 views

Protect Cisco C3560CX switch from unauthorized access on remote location

I have to extend our corporate lan to remote location on which we can not control the physical access to the switch. What are the best practices in this case/scenario? So, I will shut down password ...
1
vote
1answer
43 views

Network Security Tunnel

In the Tunnel Interface, when I edit the tunnel information, it shows: Attributes Values Tunnel Source IF10 Tunnel Destination 1.0.0.1 Tunnel Mode GRE What does IF10 ...
1
vote
1answer
86 views

Sensor to collector communication from SPAN, Inline or TAP

I am trying to figure out which one of the three modes or all would support this. The sensor is a computer running fprobe and pushing UDP traffic (netflow v5) to an IP address in the network. My ...
1
vote
1answer
554 views

What is the ports that I should close in firewall to protect my LAN?

I use a firewall with two interfaces to protect my network but I don't know witch ports to close or open in LAN and WAN interface ? thanks for your help !!
1
vote
2answers
89 views

Isolating a workstation on a network for remote access by contractors

Is it possible to isolate a computer on a network such that it can be accessed remotely by contractors, but not have access to any of the other machines on the network in any way? I understand it ...
1
vote
2answers
751 views

Does a VPN service “anonymize” a mobile connection just as much as a landline connection?

I recently read about a proposal by the military government in Thailand to make tourist SIM-cards "trackable". That got me thinking about security when accessing the Internet via a mobile connection ...
1
vote
2answers
369 views

How can I access switch port protected by 802.1X thats in a seperate collision domain seperated by a T1 bridge

I want to be able to remotely access an Ethernet switch-port protected by 802.1x. The switch I want to access is at a distant site, but I have a T1 circuit that goes from that site to my office. I ...
1
vote
1answer
102 views

How to implement port security in SDN using pox controller and ovs?

How can I defend against DHCP starvation attacks or MAC spoofing in an SDN environment?
1
vote
0answers
39 views

Dedicated Internet Router or VRF on L3? [closed]

I need to route public networks on our equipment. I plan to use existing 4500X and create a new vrf PUBLIC. There are already other vrf's existing handling internal traffic. [ISP RTR]+---/30-Network-...
1
vote
1answer
177 views

Cisco ASA access list on interface on which cryptomap is applied [closed]

I am a newbie with Cisco ASA and I have a question. Thank you in advance for answering. Take a Cisco ASA that has an internet facing interface. On this interface a cryptomap is configured with some ...
1
vote
0answers
150 views

How an MKA key server decides if it shall use MACSec and how it announce that?

According to IEEE 802.1X-2010 the standard for defining MACSec Key agreement protocol Clause 9.6, that's how the key-server decides to use MACSec or no. Each participant advertises whether it is ...
1
vote
0answers
831 views

How are required Keys inside MACSec Key agreement protocol (MKA) generated?

I am trying to wrap my head around MACSec Key agreement protocol (MKA) and its relation with MACSec and other protocols. So bear with me. To my understanding in order to MACSec to work, all nodes must ...
1
vote
0answers
39 views

What are some options to replace a computer that is dual homed on 2 separate VLAN's? [closed]

One is a "secure" VLAN, the other is a "house" VLAN. At some point, a workflow was developed in which a decision was made that sales staff needed to take some of their materials received from clients ...
1
vote
0answers
157 views

Monitoring interfaces on VyOS then SSH output to another machine (Security Onion) [closed]

I am trying to figure out the best way I can monitor interfaces on a VyOS interface from a Security Onion instance using Squil (Snort alerts etc). I am thinking SSH to VyOS to activate monitor ...
1
vote
2answers
111 views

How to block outside initiated traffic in NPTv6?

NPTv6 does prefix translation between one IPv6 address to another. Is there a way to prevent outside initiated traffic to inside (preferably in A10 AX devices)?
1
vote
1answer
298 views

Client security using UDP

Introduction I am currently trying to build up a networking layer for Unity from scratch. Currently I am testing the communication via UDP using Node.js for the server and the client. However I guess ...
1
vote
0answers
277 views

Effects of ip options drop command on Cisco 4507 Device

Are there any services or applications traversing a router that will be impacted by the command, "ip options drop"? I know the router warns about RSVP when you input this command, but this 4510 is not ...
1
vote
0answers
60 views

Cyberoam Internet Issue

I have a security problem on my network, sometimes some computers are disconecting from internet, when i visualised log files of my cyberoam , i found in top domains some adresses not recognised like ...
1
vote
1answer
934 views

Cyberoam : Issue Web Filter Policy

I am a beginner, I want to Block a Specific Website in cyberoam I have followed this tutorial : Block a Specific Website to block a Specific Website in cyberoam. the first URL has been blocked ...
1
vote
0answers
118 views

preventing network sniffing and eavesdropping using ping

We are using ping on the connection between aserver and the client pc, to check if there is an interruption, probably caused by sniffing or eavesdropping devices. During the ping, it will run a code ...
1
vote
0answers
69 views

How to proceed for research on Network security? [closed]

It may out of scope but I have to research on Network security. I have worked on Signal Processing in Time-Frequency down during Post Graduation research and have few publication. Now my interest ...
1
vote
0answers
76 views

How to make NMAP command steady and the fastest possible?

I want to make an IP scan using NMAP, but the operating time varies for some reason. The command can be executed in 2 seconds, and if I launch it again just after, it can take 30 seconds. This is the ...
1
vote
0answers
41 views

Securing WLAN using one time authentication [closed]

We have a wireless SSID for Managers which I need to secure using one time authentication. Currently we are using MAC filtering but it is insecure. So I am wondering if there is a certificate based ...
1
vote
0answers
357 views

wpa-aes EAP-peap authentication problem

I'm trying to connect ubiquity NanoStation M2 as Station/Router mode to a hotspot that I believe has WPA/AES security and EAP-PEAP for auth. I have tested the username and password from my laptop and ...
1
vote
1answer
123 views

Opinion on techinique to solve arp poisoning [closed]

I have been researching about prevention of ARP spoofing in an individual's device (smart phone or laptop) in a public network. If we save the MAC address of the default gateway at the time of ...
0
votes
2answers
2k views

NAT vs PAT Security

i don't know if i have duplicated a questions..but then i still want to ask which one is more risky to be deploy in networking will it be PAT or NAT PAT will make it risky for routing as it will ...
0
votes
2answers
29 views

Is it possible to completely mask an IP address to a point where no IP address can be detected yet an active connection is live?

I’ll keep it short and sweet; We all know to connect to internet you’ll need an address like 2001:x** or 192.x**. Using a vpn, while it does encrypt things and mask your IP, it still returns an IP. ...
0
votes
1answer
85 views

Why don't most routers automatically update their firmware? [closed]

Recently I realised that my new router's firmware was outdated. Searching a bit, I found out that most routers need to be manually updated to a new version of firmware. Running an old firmware could ...
0
votes
3answers
600 views

Is there an “active” network tap (not just passive)? [closed]

Passive network taps seem to be pretty simple. What if I want an "active" network tap? Let's say I want to change some HTTP packets, for example add info etc. Another thing that would interest my ...
0
votes
1answer
24 views

Does CSMA/CA have anti-DoS measures, and if yes which?

So as far as i understand, you can deny other devices access to a WiFi by flooding the channel they are on with data, so that the channel is never "idle", thus preventing other devices from using it - ...
0
votes
2answers
158 views

Configuring a network for 100% isolation (for security)

I'm configuring a LAN for an office. It's a new setup, and therefore there are desktops but no servers and no PC-to-PC communications - everything is on the cloud. The exception to this are several ...
0
votes
1answer
62 views

Multicast in enterprise network

Once I have heard from a professional that multicast is forbidden (or not suggested or not allowed) in enterprise networks from 2014. (He referenced to a standard or recommendation document or ...
0
votes
1answer
104 views

Trade Floor Network Design Feedback [closed]

I have an assignment that I am working on. Now I admit, I am far from knowledgeable and I have nowhere to turn to for help at the moment. I am not asking for someone to complete the assignment for me, ...
0
votes
1answer
843 views

How does ingress filtering protect against legitimate spoof packets?

I am learning about Ingress Filtering where unauthorised packets are filtered out from entering the network. To get a better understanding of it , I found an article which said: the system ...
0
votes
2answers
38 views

Why doesn't NAT drop packets with spoofed public source IP?

As I read on Section 4.3.8 of this page https://www.manrs.org/isps/guide/antispoofing/, The following code: ip nat inside source list INSIDE pool OUTSIDE overload will translate packets with a ...
0
votes
1answer
92 views

What is the difference between VPN and Domain fronting?

What is Domain fronting? and how it is different from a VPN?
0
votes
1answer
33 views

Session, presentation and application layer

I almost finished the ccna, in the meantime I'm following Pentesting courses, I noticed enough interesting protocols at the session level. I wish I could understand them as I did with cisco, but I ...
0
votes
1answer
54 views

Is it possible for a spy to send 100 Peta Byte of secret data securely online? [closed]

Suppose a spy in an enemy country has got access to 100 or more Peta Byte of top secret data. He wants to pass on the data to his headquarters. But he also wants to make sure that at no cost the data ...
0
votes
1answer
33 views

Disable TLS v1.0 in Cisco ISR4321/K9

I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ? John
0
votes
1answer
21 views

Why we use IP address in sockets? [closed]

When a server want to create a socket, it will use a combination of its IP address and some well-known port, let us say 80. So, when a segment arrived, both the server IP and port 80 will be used to ...
0
votes
1answer
47 views

Cisco IOS Sanitization: Any Way to Not Use NVRAM?

We want a method to sanitize Cisco IOS 15 routers (ISR Gen 2) before they are removed from the facility. While a "write erase" works perfectly if the router is breathing, how to sanitize dead routers ...
0
votes
1answer
21 views

Are Port Numbers Strictly Attached to the Protocol? [duplicate]

I was playing around with hosting a local webserver, and decided to host it on port 53 as an experiment. Turns out I was able to make an HTTP GET request to localhost:53 without any issues (using ...
0
votes
1answer
42 views

Is Network Bridging secure [closed]

Bridging two network cars in Windows allows the two separate networks to connect. Assuming there are three NIC cards present in a machine: A, B and C. If I bridge NIC A and B, is there a possibility ...
0
votes
1answer
87 views

How to change ip TTL=1 on flat network for security [closed]

Working on a network at an high rise apartment complex. They have a core router/firewall acting as dhcp server and about 7 switches (all l3 switches). They have a few vlans to segment traffic based of ...
0
votes
1answer
40 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
67 views

D-link managed switch or Cisco managed switch? [closed]

Can anyone tell me the difference between D-link managed switch and cisco managed switch? And why we go for cisco managed switch.