Questions tagged [security-groups]
The security-groups tag has no usage guidance.
140
questions
1
vote
1answer
34 views
How to Apply Egress rules to Default Security Group - AWS
I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
0
votes
0answers
14 views
Delayed creation of default security group for new projects
We run an OpenStack Rocky cluster, with various bits of configuration handled by a Python script directly calling the OpenStack APIs. One of the things this script does is ensure the presence of ...
2
votes
0answers
58 views
Windows Domain Group Membership Not Promulgating Fully to Workstation
Perhaps I should ask 2 or three questions but since these are all related, here they are:
Situation: Multiple Windows 2019 Standard DCs synchronized. Windows 10 Pro workstations joined to the domain....
0
votes
1answer
66 views
PowerShell - Remove User/Group from Security Permissions
I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the ...
0
votes
1answer
64 views
Adding a security group to AD user account using PowerShell
I am trying to build a PowerShell command that it will add a security group (not on Member Of) with full control permissions in AD user in order avoid doing it manually by hand. Is it possible ?
This ...
0
votes
1answer
40 views
Looking for a good explanation of how AWS Security groups behave
I'm struggling to get my head round port ranges described by AWS Security Groups and how they behave. I'm a software developer with many years of experience writing networking software so it's ...
0
votes
0answers
51 views
Samba 4 AD - AGDLP plus fileserver local groups?
I'd like to use the A-G-DL-P structure for the groups and permissions concept on a new Samba 4 AD and fileserver (AD DC separate from fileserver):
Person / User accounts become members of "...
1
vote
1answer
52 views
GPO and Security Groups in multiple domain
I have 2 forests, each with one domain with a bidirectional trust.
I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
0
votes
1answer
58 views
Need of distribution groups in active directory
I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
0
votes
1answer
113 views
ec2 instance will not allow connections to port from within instance after opening port on security group
I have an EC2 instance on a security group that allows ports 80, 443 and 22 (tcp, inbound from 0.0.0.0/0 and ::/0); and every outbound connection (to 0.0.0.0/0 & ::/0, all tcp & udp).
I've ...
1
vote
1answer
41 views
Active Directory - grant access rights to a user that belongs to multiple groups
I have a Windows 2012 Server with file server role.
I have users in my active directory which are defined by 3 things : country - service - role
I have about 10 countries, 10 services and 5 roles.
How ...
1
vote
1answer
70 views
ec2 permissions to manage only firewall access
I'd like to allow some developers to manage firewall rules, specifically rules in ec2 security groups, (or some of them ideally) so that they can, eg, update their changing IP addresses to access ...
0
votes
0answers
25 views
Unable to access port of AWS EC2
I have a VPN tunnel setup between Local Infrastructure and EC2 instances. I am able to ssh into the EC2 instance means I am able to access port 22 but unable to access 5432 port.
Below is Security ...
0
votes
0answers
26 views
Miigrating security groups from one AWS account to another
I quite new to AWS, I have cloud formations stacks with several security groups (25 in all) I want to migrate these security groups to another AWS account. I am wondering what is the best way for and ...
1
vote
1answer
33 views
AWS EC2 access attempts on blocked ports
I have recently installed OSSEC on a RHEL 8 server being hosted on AWS EC2. Since then I have been receiving brute force attempts and other attempts on ports that are not open in my security group.
...
-1
votes
2answers
87 views
In which shared-mailboxes is a security group entered with sendas permissions? [closed]
How can I with powershell in which shared-mailboxes is a security group entered with sendas permissions?
1
vote
1answer
141 views
Should AWS Security groups allow internet traffic?
Ok, so I created a default Elastic Beanstalk Application and getting this reported as High Risk, and happens on all Regions that are connected to the VPC Network (which is not a public IP, only the ...
0
votes
0answers
62 views
Nested AD groups working in local computer groups, but certain servers fail to allow RDP?
I have 100+ servers, I have added a Universal AD group to the local servers Adminstrators Group based on the server's name. Within this AD group I have nested various AD groups as is appropriate for ...
0
votes
0answers
50 views
I'm in need of an effecient way to write a powershell script
I have about 1,000 users that I need to remove from a group. The problem is the group is nested into a group which is then nested into another group.
Group A
Group B ---->Group 1 ---->Group P1
...
1
vote
1answer
25 views
Info about Event logs (Active directory)
Recently 3 of my Active directory admins are unable to login to AD server through RDP.
After we cross checked everything, we found these 3 users are added in one security group called "Deny RDP ...
0
votes
1answer
154 views
AWS IAM policy to allow user to edit one specific Security Group only
I'm trying to allow a user to modify inbound rules on one particular security group.
Here's what I tried. I thought it would be straight forward, but this doesn't work. What other permissions do I ...
-1
votes
4answers
125 views
Behaviour of Restriced groups in Group Policy after move to new OU (within the same domain)
I'm fairly at home with Group Policy but this is sort of a strange one. I know security settings get applied every 16 hrs. I had a policy that added an AD group to the local admins (restricted groups)....
7
votes
4answers
2k views
Is it safe to allow inbound 0.0.0.0/0 on EC2 security group?
I created an EC2 instance on AWS, and I was assigned a default "security group". I understand that this acts as a virtual firewall for my server.
I had trouble connecting into this EC2 ...
1
vote
2answers
324 views
AWS CloudFormation - can I use Sub inside GetAtt?
I'm trying to reference a security group inside a CloudFormation template.
the name of the group is !Sub '${EnvironmentName}-SG-Private, where EnvironmentName is a template parameter.
However, the ...
0
votes
1answer
29 views
How to add AWS Fargate service and google cloud run services under same security groups?
I have a web application which consists of an api gateway and two microservices. I want the microservices to remain hidden from the outside world and only the api gateway should be able to access the ...
google-cloud-platform
1
vote
1answer
363 views
can't connect to OpenLDAP server in EC2 instance (AWS)
I would like to know if exist some additional security measures from AWS while connect to a OpenLDAP server in EC2 Linux instance (Ubuntu 18.04).
I need this OpenLDAP server to check if user/password ...
0
votes
2answers
279 views
Required outgoing ports to open for an Ubuntu 20.04 EC2 instance (beside TCP 80/443)
I'm hardening the security groups for EC2 instances running on a default Ubuntu 20.04 AMI. What system services will break after closing all outgoing ports expect TCP 80 and TCP 443? (I'm assuming all ...
-1
votes
1answer
42 views
Disable Do not display lock screen using powershell
Is there any Power shell command that changes the setting of the "Do not display lock screen" policy in Local group policy and i should perform the same on 30 machines.
Can i do it with a single ...
0
votes
1answer
258 views
Jenkins with Nginx, need to listen only https port
I have Jenkins instance in AWS EC2. I have installed Jenkins with port 8080. And I have nginx as a reverse-proxy.
My jenkins.mydomain.com.conf:
server {
listen 80;
server_name ...
0
votes
0answers
15 views
AWS EC Security group can not connect from internal network
I created 3 intances in same VPC and same subnet.
2 instances A,B use same security group: WebSG (id: sg-ab)
instance C use security group: DbSG (id: sg-onlyc)
In WebSG, I add rule Alltraffic from ...
1
vote
1answer
83 views
Firewall : is inbound rule required for getting SYN-ACK from the server while outbound rule already there?
I have a VPC, within which I have a EC2 instance deployed in private subnet.
I have my NACL(Subnet firewall) ALLOW ALL on inbound and outbound.
I have my security group rule(Ec2 firewall) , It ...
0
votes
0answers
15 views
Office365 Security Groups Update Time
My organisation is using Office365.
I just created a security group. I called it Developer Security Group. I also have a Sharepoint site. All the developers were added to this exchange site. I removed ...
6
votes
1answer
847 views
Can't ping EC2 instance after enabling ICMP packets [closed]
I followed this guide to allow me to ping my EC2 instance. In my security group I have Custom ICMP Rule - IPv4, Echo Reply, N/A, Anywhere.
However it simply doesn't work. If i run ping ec2-X-X-X-X.ap-...
1
vote
1answer
83 views
Load balancing for Host network is not working when access within the instance
I have designed this infrastructure.
ECS SG:
Ingress: 0.0.0.0/0
Egress: 0.0.0.0/0
ECS Cluster ASG SG:
Ingress: 0.0.0.0/0
Egress: 0.0.0.0/0
Now when I SSH to instance EC2 No 1. Sometimes I have ...
2
votes
1answer
134 views
AWS cli filter not applied
I want to receive some values from an AWS SecurityGroup and am using the following command:
aws ec2 describe-security-groups --group-ids $GROUP \
--filters 'Name=ip-permission.from-port,Values=22 ...
1
vote
1answer
85 views
Will a domain controller in the domain that a group is defined contain all member information?
Let's say I have a forest setup with many domains. If I were to pick an arbitrary security group from any of the domains, what is the best way to find ALL user members of that group, including user ...
1
vote
0answers
40 views
Rust Nickel Server Not Working When Deployed
I created a simple backend server using the Rust "Nickel" framework by following the guide here: https://nickel-org.github.io/getting-started.html
I can run cargo run locally and hit the local ...
1
vote
2answers
38 views
How to prevent user from disabling the Mcafee
How can I prevent user from disabling the Mcafee VirusScan Enterprise 8.8? Is there any Registry or Local Group Policy that I could do it?
2
votes
0answers
98 views
AWS EC2 : IAM policy to allow inbound SecurityGroup with PORT Range
I want to allow the access to specific ec2 security group to one of the developer. For that I know that we can use something like this :
{
"Version": "2012-10-17",
"Statement": [
{
...
1
vote
1answer
76 views
Why can't I ping my new Amazon Web Service EC2 Windows instance, even with security group with ICMP enabled?
There are several questions asking the same thing, but they are all 6+ years old so I thought I'd ask again in case something has changed. The AWS EC2 docs here also make it look simple; just add the ...
0
votes
1answer
730 views
Active directory group scope - Domain local or Global?
CONTOSO has offices in the UK and in the US. each country has its own domain, but the domains trust each other.
I have created a group in the AD in UK but if the group is set to global I cannot add ...
1
vote
1answer
138 views
GPO - Setting an Item-Level Filter on a Registry Collection Does not work
We're faced with a weird issue. We created a collection of Proxy Settings that we are applying to essentially everyone in the company. However we do have a subset of users that need to be excluded ...
1
vote
1answer
116 views
Blocking all outbound traffic except API response - AWS Security Groups
I've got a web app (App 1) and am setting up an API endpoint. I will send a request to that endpoint from App 2. App 1 and App 2 are in the same VPC.
I'd like for App 1 to allow NO outbound traffic ...
0
votes
1answer
557 views
How to export/import local groups with domain user members from/to a Windows server
What is the recommended way of cloning local group memberships (local groups, domain users) from one Windows server to another (script, tool, utility)? Servers are at version 2008 and later. Thanks.
0
votes
1answer
153 views
How to manage custom application specific permissions in AD?
We are planning to let our customers of our software configure users and their permissions entirely in Active Directory.
Once a AD-user is member of the AD-group "SoftwareXyz" he can log in and use ...
1
vote
0answers
568 views
Nesting gMSA in security group for use in ACLs
I'm trying to solve a conundrum for my DBAs and developers. We have an application that is running under a gMSA (group managed service account) identity. This application needs to access a SQL ...
4
votes
1answer
244 views
Why EC2 instance continues responding to a ping request after deleting the inbound security group rule?
While playing around with AWS console, I tried the following
Launched an EC2 instance (public IP enabled) in the default VPC with the default security group, and default subnet.
EC2 launched in the ...
1
vote
1answer
51 views
Allow only Angular application to access Node application (Same EC2 instance)and block Node for everybody else
I have hosted both my angular(port no 4200) and node application(port no 3000) on the same EC2 instance.
Both are currently accessible to anyone.
I want to limit access to the Node application so that ...
1
vote
1answer
30 views
AWS: Same VPC, but can only access one DB
I am fairly new to AWS, so I am sure that I am just missing something, but here is my problem:
I have created a VPC with 3 subnets and one security group linked to all of them. The security group ...
0
votes
2answers
45 views
Benefits of private VPC with NAT versus public VPC with firewall rules (in AWS)
Imagine you have some EC2 servers which are fronted by a load balancer (ELB).
Say they're in a public VPC - i.e. each EC2 instance has a public IP address and each instance is firewalled using ...
