Questions tagged [security-groups]
The security-groups tag has no usage guidance.
0
votes
2answers
65 views
Avoiding security groups in Windows domain with automated filesystem security
As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
2
votes
1answer
71 views
Limit public access to AWS ECS Fargate Service
I have a service on AWS ECS deployed using Fargate.
This service uses a Network Load Balancer (NLB) to allow an Elastic IP to be associated with the service.
This is not an http service and is using ...
1
vote
0answers
15 views
Editing Local Windows Built in Group: Network Operator
We need our local Built-in Group Network operator to be able to modify the speed ( aka Advanced TCP-IP setting) of the Windows 10 Network adapter but as per our test/research, this privilege is not ...
-1
votes
2answers
48 views
Why are primary network interfaces forced to inherit all the security groups of their EC2 instances?
I'm testing a virtual load balancer which is running on an EC2 instance. I'd like to be able to alter the setup and test the balancer under various conditions. In order to simulate a physical load ...
5
votes
3answers
467 views
AWS Security Group - how to allow Public IP from another Security Group
I have two instances in a VPC distinct security groups, each with their own public IP. I would like instance one to be able to connect to instance two on it's Public IP. I discovered that granting ...
9
votes
4answers
1k views
SSH between EC2 instances not permitted
I am setting up a few EC2 instances in a shared AWS account and want to give them access to each other. At the same time I want to prohibit access from other instances in the account.
I created a ...
1
vote
1answer
31 views
How to connect to my server from AWS device farm when limiting the device farm ip range to 54.244.50.32/27?
We have a classic load balanser that's configured to allow TCP traffic on port 444. We have a security group configured that allows TCP traffic from 54.244.50.32/27.
If we open up the traffic to the ...
1
vote
4answers
103 views
Do not show all docker containers to a particular user
I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
1
vote
1answer
22 views
Database Connections Persist After Security Group Change
We've set up a system to send a message to a queue in SQS when there's an outage on a dependency. In order to simulate an outage and test the system, I blocked the outbound port to a database on the ...
2
votes
2answers
248 views
Does it makes sense to configure iptables when you have configured AWS EC2 security groups?
We are using some Amazon EC2 instances with configured Security Groups (e.g. can SSH only from particular IPs -- sorry I cant post rules).
Some time ago I checked iptables and it looked like there ...
0
votes
0answers
83 views
IIS on AWS Windows Server 2016 not serving to external clients
I created an AWS Windows Server 2016 instance and also allocated an elastic IP address to it. Server's running fine and I can RDP into it.
I also installed IIS on it and ensured that it is running. ...
0
votes
1answer
158 views
AWS ALB security group allow connection from only my servers
I'm using an intenet-facing AWS ALB (Application Load Balancer) with a ECS cluster(docker), and I want to use it for forward web standard and internal web services traffic.
The application load ...
0
votes
1answer
17 views
Issue connecting EC2 instances in 2 separate VPCs (same region)
I have 2 VPCs (default and special) each hosting 1 EC2 instance.
Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
0answers
129 views
AWS Lambda Function to dynamically add and remove public ip to security group
I was looking for a way through which I can add and remove rule in specific security group.
Background:
I am building an AWS Code Pipeline which will allow EC2 instance to pull code from AWS Code ...
2
votes
2answers
119 views
System Account Access Token missing groups
I'm experiencing a weird phenomena regarding Windows SYSTEM Account. Looking at these three different ways to start a process as SYSTEM:
Sysinternals PSExec
Task Scheduler
GPO Startup Script.
...
0
votes
1answer
260 views
Unable to remove security group from OU advance permission due to inheritance + Active directory 2012
I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory.
When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
0answers
23 views
Attack Surface Analyzer report possible actions
I am using Microsoft's Attack Surface Analyzer, and I would like to get a better understanding of what would be the best way to mitigate the findings.
For example if in my report I get Directories ...
0
votes
1answer
209 views
AWS Network ELB vs security groups
Decided to move a couple of internal LBs from classic to network ELB. And I have noticed that NetELB does not accept traffic within the scope of those rules which have as source another security group ...
1
vote
0answers
20 views
Incorrectly-Made Security Group
I was recently trying to research into nested groups, and I ran a gpresult under my standard domain (non-elevated) account. I noticed 2 AD security groups that my account was inheriting that made no ...
0
votes
1answer
178 views
AWS VPC peering using security groups
I setup a VPC peering connection between two regions (us-west-2, eu-central-1) in a single AWS account. In the documentation I see:
You cannot reference the security group of a peer VPC that's in a ...
0
votes
1answer
55 views
Does AWS security group apply to communication between processes on an instance?
Do inbound and outbound traffic rules apply to communication between processes inside an instances?
For example, My MongoDB instance is running on port 27017 while my Node.js app is listening to port ...
1
vote
1answer
35 views
Proper way to manage privileged admin groups for two trusted Active Directory forests?
The scenario is:
There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
0
votes
1answer
286 views
Issues with Deploying multiple printers in a single GPO with Item-Level Targeting
I have a single GPO that contains all printers I need to deploy.
The security filtering for this GPO is set to Authenticated Users.
The GPO is linked to the OU with all of our users.
GPO > User Config ...
0
votes
1answer
291 views
What are ingress security groups in AWS / Terraform
When defining an AWS security group in Terraform, you can set up inbound/ingress configurations. However, these ingress configurations can also point at other security groups.
The terraform ...
2
votes
1answer
193 views
securely connect jenkins and github
we have a Jenkins server running on an ec2 instance. The security groups are very restricted in this server, they only allow traffic from the company office, and the slave nodes. we want to setup ...
github
1
vote
0answers
1k views
Squid with AD groups + Kerberos authentication in pfsense?
I followed steps found on the link:
https://journeyofthegeek.com/2017/12/30/pfsense-squid-kerberos/
And the kerberos authentication without AD group membership restriction works very well, but I don'...
0
votes
2answers
39 views
Server 2012 R2 - Adjusting security permissions for active directory security groups
I have created an active directory security group.
I would like to adjust the security permissions so a group will have the following permissions. The identified group should be able to add computer ...
3
votes
1answer
584 views
Do we need both security groups and server-side firewall in AWS EC2?
EC2 security groups looks awesome, but i am quite new to AWS system, that's why i am asking this question.
Do i also need to setup server firewall while having AWS security group?
My main point is ...
0
votes
1answer
183 views
Allow one member of a security group to access a folder, deny access to the remaining members of the same security group
I wish to know if the following is possible and how to apply it within AD structure running on windows server 2012R2.
I apply folder access using security groups.
Example = Agents folder can only be ...
1
vote
1answer
1k views
EC2 instance's Docker ports not not accessible after changing instance type
When changing the EC2 instance type I ran into a problem. The machine had 3 Docker containers that needed to be restarted and after the restart their ports became unreachable.
What could be the ...
1
vote
1answer
40 views
Windows Server 2008 r2 security permissions [closed]
I hope I've selected the correct StackExchange for this question. I have searched google and StackExchange but haven't been able to find an answer to my question with the search queries used.
I ...
0
votes
1answer
964 views
How to allow connection between ec2 instances in different regions?
I have 10 instances with a security group in Oregon and another 10 in Virginia.
How to add edit security group(rules) to allow traffic between them??
5
votes
1answer
2k views
Difference between security groups (on AWS) and iptables
I'm just setting up a server and wondering if it's necessary to set the firewall twice. For example I've a security group with the following open ports:
80, 443, 22
Now I setup my server with UFW (...
0
votes
1answer
597 views
AWS: NGinx Reverse Proxy and Security Groups
I have two servers, called NGinxServer and AppServer. NGinxServer is the accessible entry point for all calls to AppServer. For security reasons, I modified the Security Group for AppServer to not ...
2
votes
0answers
214 views
Exchange online security groups without email
We're trying to create user groups in Exchange Online in order to group users when applying permissions to specific folder on shared mailboxes.
We don't want to mail-enable those groups, but I don't ...
1
vote
1answer
78 views
Microsoft SQL Server users from OU/SG
MSSQL has its own user authentication apart from the operating system or Active Directory user authentication but can I apply database permissions to organisational units or security groups or somehow ...
2
votes
1answer
31 views
AWS security rules bug?
I'm trying to put online a website with HTTPS. I have double checked AWS Security Groups, and everything looks fine.
I'm running on Node.JS, and this is the app script, so I'm pretty sure it's ...
0
votes
2answers
40 views
Check who / when EC2 instance was assigned a security group
I'm pretty new to EC2 so apologies if this is trivial but I can't seem to find an answer from Google. I have a EC2 instance that was in a security group it should not have been in. Whilst I have ...
1
vote
3answers
879 views
Assign default security group to Elastic Beanstalk instance
I have created a Elastic Beanstalk environment and I have a rails app running which is great. However I am unable to assign is to the default security group.
Current config
I have added a ...
1
vote
1answer
468 views
Network problems when I create Beanstalk environments from an AMI
I'm using AWS elastic beanstalk web interface to create an environment based on an existing AMI that has our application deployed on it.
The environment gets created, the app is accessible via the ...
0
votes
0answers
32 views
User ACEs in ACL for created directories outside AD Security Group Control
We control access to our file shares using Security Groups in AD.
\ZONE
ZONE Group (Read & Execute, This Folder only)
ZONE-Write Group (Modify, This folder, subfolders and files)
user "rick....
0
votes
1answer
31 views
How to customize permission for a group on Windows Server?
I want to create a "restricted" administrator group that can only run the privileged PowerShell cmdlet Get-RemoteAccessConnectionStatistics. Does Windows Server support such level of granularity? And ...
0
votes
1answer
290 views
Security group to allow connection from OpenVPN network
I am making a openVPN server in my AWS VPC. I want to make a security group that only accept SSH connection from my VPN. I already using my VPC CIDR (10.0.0.0/8), OpenVPN public address, and OpenVPN ...
1
vote
0answers
274 views
OpenVAS With NVT Feed Sync Error on Kail Linux and Ubuntu
Recently installed OpenVAS on Kail Linux and Ubuntu from ISO but have been running into an issue with the sync process.
When installed onto VMware Workstation via Kail VM image updates the openvas-...
0
votes
1answer
39 views
Why is security group in Windows Active directory called security?
Do you know in any chance why Security group link is called security? Is any property of AD object somehow hashed or something like that?
0
votes
0answers
40 views
Domain Admins - Restoring Privledges
Long story short, Domain Admins have been stripped of their privileges and need to become proper administrators of the domain again.
My predecessor removed the Domain Admins group of all permissions ...
0
votes
1answer
446 views
VPC peering sharing security group ingress rules
If I have VPC1 with security group (sg-aaaaaaaa) that allows ssh access from source 10.10.10.10/32 and I peer VPC1 with VPC2 that has a security group (sg-bbbbbbbb) that allows ssh access from source ...
0
votes
0answers
1k views
Not able to get the apt repo update on amazon ubuntu ec2 instance
I've one ubuntu instance in EC2 on which i am trying to run sudo apt-get update command and which is giving below error :-
Err http://ppa.launchpad.net trusty InRelease
Err http://ppa.launchpad.net ...
0
votes
1answer
625 views
pass an existing VPC ( or Subnet/Security group) as a parameter to the template using the Ref built-in?
I am trying to find a way to set default VPCs, Subnets and Security Groups in the Cluster.template JSON file.
Is there a way to pass an existing VPC ( or Subnet/Security group) as a parameter to the ...
2
votes
4answers
71 views
Windows server 2012 Active Directory Groups
Have a quick question.
I work in a large company and i've always been told that if a users needs let's say access his emails on the phone he has to be member of a specific group (apart from ...
