The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
3answers
319 views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
1answer
181 views

SynFlood attack, spoofed IPs, syncookies mitigation

Due to a recent increase in SynFlood attacks on my company's systems i've been testing by Syn flooding the hosts myself to see how easy they are to disrupt, and the answer is 'quite easy'. By using a ...
2
votes
1answer
172 views

Software to prevent daemons from binding/listening to local ports?

Having an issue with some not-so-bright developers creating daemon processes that are binding to the (not actually reserved) local ports on our Linux servers. Those ports being defined in: cat ...
1
vote
1answer
372 views

Network Services Write/Modify Permissions on Inetpub Folder Potiential security issues

I have an asp.net web application that runs as a Content Management system for a website. It was originally on an IIS6 Server. However the web application was recently moved to an II7 Server. After ...
1
vote
1answer
115 views

secure L2 connection

Due to some rapid changes I need to also provide vlan(s) in a new location. The topology looks like this: (main location, vlans:id=6(workstations),id=8(phones)) | my_switch01 \ \ ...
0
votes
1answer
39 views

Reading .pcap files by CISCO ASA5515-X

I have .pcap file that already includes thousands of packets. I want to analyze these packets via CISCO ASA5515-X to observe how much of them are possible to be an attack packet (malicious). However, ...
0
votes
0answers
17 views

How to config Squid SSL bump to let Paloalto PA series firewall recognize App-ID

A Paloalto firewall(PA-2050,POS 4.1x) was capable of recognizing the websites which users are visiting(thru http/https) then flag them with a App-ID and apply application control on the traffic, for ...
0
votes
0answers
45 views

Trouble getting started with the STEALTH monitoring package

Is anyone here familiar with the Linux-based STEALTH package (for monitoring FS integrity of client systems)? I'm trying to get started with a very simple configuration, but I'm running into trouble ...
0
votes
0answers
136 views

DDoS attack simulation using MININET

I´m developing some dynamic security policies using SDN, one of them consist in how the network should respond to a DDoS attack detection. So, I would like to test my policies but I'm having some ...
0
votes
0answers
105 views

Firewall is down, but I still can't connect in from outside (Ubuntu)

I'm very confused right now. I have a server, Sahand, that I can connect from on campus too without issue. There's another server, Dena, that shares the same switch, etc.. also can connect to it. ...
0
votes
0answers
446 views

Network Segmentation - router, switches, or both?

I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage. Currently, the network is flat and almost ...