The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
3answers
518 views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
1answer
319 views

SynFlood attack, spoofed IPs, syncookies mitigation

Due to a recent increase in SynFlood attacks on my company's systems i've been testing by Syn flooding the hosts myself to see how easy they are to disrupt, and the answer is 'quite easy'. By using a ...
2
votes
1answer
208 views

Software to prevent daemons from binding/listening to local ports?

Having an issue with some not-so-bright developers creating daemon processes that are binding to the (not actually reserved) local ports on our Linux servers. Those ports being defined in: cat ...
1
vote
1answer
581 views

Network Services Write/Modify Permissions on Inetpub Folder Potiential security issues

I have an asp.net web application that runs as a Content Management system for a website. It was originally on an IIS6 Server. However the web application was recently moved to an II7 Server. After ...
1
vote
1answer
116 views

secure L2 connection

Due to some rapid changes I need to also provide vlan(s) in a new location. The topology looks like this: (main location, vlans:id=6(workstations),id=8(phones)) | my_switch01 \ \ ...
0
votes
1answer
50 views

Reading .pcap files by CISCO ASA5515-X

I have .pcap file that already includes thousands of packets. I want to analyze these packets via CISCO ASA5515-X to observe how much of them are possible to be an attack packet (malicious). However, ...
0
votes
0answers
93 views

How to config Squid SSL bump to let Paloalto PA series firewall recognize App-ID

A Paloalto firewall(PA-2050,POS 4.1x) was capable of recognizing the websites which users are visiting(thru http/https) then flag them with a App-ID and apply application control on the traffic, for ...
0
votes
0answers
58 views

Trouble getting started with the STEALTH monitoring package

Is anyone here familiar with the Linux-based STEALTH package (for monitoring FS integrity of client systems)? I'm trying to get started with a very simple configuration, but I'm running into trouble ...
0
votes
0answers
112 views

Firewall is down, but I still can't connect in from outside (Ubuntu)

I'm very confused right now. I have a server, Sahand, that I can connect from on campus too without issue. There's another server, Dena, that shares the same switch, etc.. also can connect to it. ...
0
votes
0answers
516 views

Network Segmentation - router, switches, or both?

I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage. Currently, the network is flat and almost ...
-3
votes
0answers
20 views

SSL sec_error_unknown_issuer

Our network is getting an error of sec_error_unknown_issuer for HTTPS websites. Suggest how to track the loopholes or man in middle attack in our network or it is some other problem?