Questions tagged [security-groups]
The security-groups tag has no usage guidance.
159
questions
0
votes
1
answer
18
views
Does blocking all outgoing traffic on cloud instance lock me out?
I have to test an app which first downloads data, but then, can not communicate with the world for the duration of the test (so it doesn't gossip stuff).
There are ways to enforce this on the app, but ...
- 439
0
votes
0
answers
22
views
TCP communication on port not responding on different Availability Zone or Subnet
I'm a little curious and confused about this situation. We setup a monitoring instance scraping an exposed endpoint on 2 different instances. Both on same VPC, same security group, same route table ...
0
votes
1
answer
22
views
AWS Postgres database IP in security group, how to enter info to survive IP address changes?
I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security ...
- 121
0
votes
0
answers
25
views
Linux: How to allow outbound rules for seccurity updates
We use aws ec2 instances with the 'AWS Linux AMI 2' image.
We have a script for security updates with this code: yum update -y --security.
I want to allow only security update in outbound rules - aws ...
- 223
0
votes
1
answer
99
views
Create a Mail-enabled security groups with Azure AD role assignment?
I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks ...
1
vote
1
answer
26
views
RHEL 8: Administrator vs. Auditor role
On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way:
An administrator/operator should be able to do almost ...
- 396
0
votes
0
answers
73
views
Logging on Windows with user accounts in Protected Users group over VPN
I am planning implementation of Microsoft’s Active Directory tier administrative model, and I was wondering how to overcome the problem of system administration over VPN. One of the security ...
- 243
1
vote
0
answers
175
views
Remove the default Security Group assigned by Elastic Beanstalk
I have created a Elastic Beanstalk environment and have created this .config to edit the security groups which worked. Now my EC2s are attached to the new SG and the default one.
option_settings:
- ...
- 11
0
votes
1
answer
102
views
A user activity is detected from a disabled account in Active directory
I have disabled an user in my Active Directory (terminated the account). However, I am still getting the log that Event IDs 5379 (credential manager credentials were read.), 4673 (a privileged service ...
- 3
0
votes
2
answers
587
views
AWS - Adding multiple IPs to Security Group Inbound Rules
I need to open 20 ports for 12 IP blocks.
Do I have to manually add 240 rules in this case? I feel like there must be a way to just copy&paste the IP list to somewhere.
I googled and found it's ...
- 105
1
vote
2
answers
346
views
Whitelist both IPv4 and IPv6 in AWS Security Group
I am setting up an SFTP server, I want to white list all the IPs in the Security Group so people can connect to it from anywhere.
At the moment I am adding 2 rules to the Inbound rules, one rule for ...
- 466
2
votes
2
answers
936
views
Office 365 Exchange Public Folder lost SID assignment to security group folder permissions
We installed a new Exchange 2016 server and migrated all the mailboxes from the Exchange 2010 server to it.
Then we migrated all the mailboxes and public folders from MSEX2016 to Office 365, and we ...
- 125
0
votes
2
answers
56
views
How can I easily manage constantly changing public IP addresses in my many security groups
Our development environment is hosted on AWS, and is accessed by dozens of people. As people join and leave the project, or work from alternate (often temporary) locations, I find myself constantly ...
- 309
0
votes
2
answers
287
views
Nested AD Groups RDP permission not applying to new Windows Server 2019 VM
Similar Issue with no responses: Nested AD groups working in local computer groups, but certain servers fail to allow RDP?
I am only new to this environment and the person I took this over from also ...
- 1
0
votes
0
answers
171
views
AWS ELB(classic load balancer) response is too slow and sometimes response is not coming it is showing timed out
I have EKS cluster setup in private subnet in which i'm having my microservices and for each microservice i have classic load balancer to access API. But response is having high latency and sometimes ...
- 21
11
votes
2
answers
2k
views
What is a secure and user-friendly way to provide only a few users access to web app on Amazon EC2?
Situation
We have a web app hosted on Amazon EC2. It's intended to be used only by a few users in a company.
How we're dealing with this
We share the (Elastic) IP address of the instance with the ...
- 211
2
votes
2
answers
4k
views
Why am I getting "Connection refused"?
I am running a hello-world http server on an ubuntu EC2 instance, let's say, myurl.com. I am unable to curl it from my client:
$ curl myurl.com:4296
curl: (7) Failed to connect to ...
- 129
0
votes
2
answers
345
views
bulk removing direct access to a folder via PowerShell ACL
On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how ...
- 1
2
votes
2
answers
37
views
Add domain users to a group of security groups via group policy
Is there a way to add domain users to a collection of security groups via group policy? We have some SSO groups that all employees share. Instead of tech support person having to manually add new user ...
- 21
3
votes
1
answer
65
views
Windows - Group Policy - Numerous Share Drives w/ Item-Level Targeting
Overview
We have been working on getting our numerous sites to map share drives for each user that needs access to their sites. We have no way of standardizing this from within their AD profile as ...
1
vote
1
answer
90
views
Why don't Windows domain machines periodically query security group membership, like other things? [closed]
When I was in lower tier support (and sometimes still), one of the most annoying sequences of events was a request for new file permissions >> add user to security group and specify in the reply ...
- 185
1
vote
2
answers
330
views
Link a GPO to an OU or security group, Who will win?
Here's the scenario:
A GPO is linked to an OU to enable, for example, UAC setting.
However, since there are certain systems that require UAC to be disabled, there is a GPO that disables these settings....
- 11
0
votes
2
answers
1k
views
Is there a way to export all AWS Security Groups to CSV? moreover, is there a recommended way of keeping track of SR changes?
We have a relatively small dev environment in AWS with about 50 Security groups with multiple permission entries. is there a recommended way of keeping track of SR changes, Access, etc?
My manager ...
1
vote
1
answer
622
views
How to Apply Egress rules to Default Security Group - AWS
I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
- 143
2
votes
0
answers
68
views
Windows Domain Group Membership Not Promulgating Fully to Workstation
Perhaps I should ask 2 or three questions but since these are all related, here they are:
Situation: Multiple Windows 2019 Standard DCs synchronized. Windows 10 Pro workstations joined to the domain....
- 21
0
votes
1
answer
403
views
PowerShell - Remove User/Group from Security Permissions
I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the ...
- 1
0
votes
1
answer
78
views
Adding a security group to AD user account using PowerShell
I am trying to build a PowerShell command that it will add a security group (not on Member Of) with full control permissions in AD user in order avoid doing it manually by hand. Is it possible ?
This ...
0
votes
1
answer
48
views
Looking for a good explanation of how AWS Security groups behave
I'm struggling to get my head round port ranges described by AWS Security Groups and how they behave. I'm a software developer with many years of experience writing networking software so it's ...
- 1,685
1
vote
1
answer
190
views
GPO and Security Groups in multiple domain
I have 2 forests, each with one domain with a bidirectional trust.
I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
- 13
0
votes
1
answer
134
views
Need of distribution groups in active directory
I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
0
votes
1
answer
640
views
ec2 instance will not allow connections to port from within instance after opening port on security group
I have an EC2 instance on a security group that allows ports 80, 443 and 22 (tcp, inbound from 0.0.0.0/0 and ::/0); and every outbound connection (to 0.0.0.0/0 & ::/0, all tcp & udp).
I've ...
- 277
1
vote
1
answer
122
views
Active Directory - grant access rights to a user that belongs to multiple groups
I have a Windows 2012 Server with file server role.
I have users in my active directory which are defined by 3 things : country - service - role
I have about 10 countries, 10 services and 5 roles.
How ...
- 11
1
vote
1
answer
72
views
ec2 permissions to manage only firewall access
I'd like to allow some developers to manage firewall rules, specifically rules in ec2 security groups, (or some of them ideally) so that they can, eg, update their changing IP addresses to access ...
- 11
1
vote
1
answer
92
views
AWS EC2 access attempts on blocked ports
I have recently installed OSSEC on a RHEL 8 server being hosted on AWS EC2. Since then I have been receiving brute force attempts and other attempts on ports that are not open in my security group.
...
- 113
-1
votes
2
answers
201
views
In which shared-mailboxes is a security group entered with sendas permissions? [closed]
How can I with powershell in which shared-mailboxes is a security group entered with sendas permissions?
- 3
1
vote
1
answer
467
views
Should AWS Security groups allow internet traffic?
Ok, so I created a default Elastic Beanstalk Application and getting this reported as High Risk, and happens on all Regions that are connected to the VPC Network (which is not a public IP, only the ...
- 163
0
votes
0
answers
196
views
Nested AD groups working in local computer groups, but certain servers fail to allow RDP?
I have 100+ servers, I have added a Universal AD group to the local servers Adminstrators Group based on the server's name. Within this AD group I have nested various AD groups as is appropriate for ...
- 1
0
votes
0
answers
52
views
I'm in need of an effecient way to write a powershell script
I have about 1,000 users that I need to remove from a group. The problem is the group is nested into a group which is then nested into another group.
Group A
Group B ---->Group 1 ---->Group P1
...
1
vote
1
answer
29
views
Info about Event logs (Active directory)
Recently 3 of my Active directory admins are unable to login to AD server through RDP.
After we cross checked everything, we found these 3 users are added in one security group called "Deny RDP ...
- 11
0
votes
1
answer
672
views
AWS IAM policy to allow user to edit one specific Security Group only
I'm trying to allow a user to modify inbound rules on one particular security group.
Here's what I tried. I thought it would be straight forward, but this doesn't work. What other permissions do I ...
- 117
-1
votes
4
answers
308
views
Behaviour of Restriced groups in Group Policy after move to new OU (within the same domain)
I'm fairly at home with Group Policy but this is sort of a strange one. I know security settings get applied every 16 hrs. I had a policy that added an AD group to the local admins (restricted groups)....
- 99
7
votes
4
answers
3k
views
Is it safe to allow inbound 0.0.0.0/0 on EC2 security group?
I created an EC2 instance on AWS, and I was assigned a default "security group". I understand that this acts as a virtual firewall for my server.
I had trouble connecting into this EC2 ...
- 201
1
vote
2
answers
848
views
AWS CloudFormation - can I use Sub inside GetAtt?
I'm trying to reference a security group inside a CloudFormation template.
the name of the group is !Sub '${EnvironmentName}-SG-Private, where EnvironmentName is a template parameter.
However, the ...
- 121
0
votes
1
answer
63
views
How to add AWS Fargate service and google cloud run services under same security groups?
I have a web application which consists of an api gateway and two microservices. I want the microservices to remain hidden from the outside world and only the api gateway should be able to access the ...
google-cloud-platform
1
vote
1
answer
836
views
can't connect to OpenLDAP server in EC2 instance (AWS)
I would like to know if exist some additional security measures from AWS while connect to a OpenLDAP server in EC2 Linux instance (Ubuntu 18.04).
I need this OpenLDAP server to check if user/password ...
- 111
0
votes
2
answers
716
views
Required outgoing ports to open for an Ubuntu 20.04 EC2 instance (beside TCP 80/443)
I'm hardening the security groups for EC2 instances running on a default Ubuntu 20.04 AMI. What system services will break after closing all outgoing ports expect TCP 80 and TCP 443? (I'm assuming all ...
- 501
-1
votes
1
answer
92
views
Disable Do not display lock screen using powershell
Is there any Power shell command that changes the setting of the "Do not display lock screen" policy in Local group policy and i should perform the same on 30 machines.
Can i do it with a single ...
- 1
0
votes
1
answer
627
views
Jenkins with Nginx, need to listen only https port
I have Jenkins instance in AWS EC2. I have installed Jenkins with port 8080. And I have nginx as a reverse-proxy.
My jenkins.mydomain.com.conf:
server {
listen 80;
server_name ...
- 501
0
votes
0
answers
20
views
AWS EC Security group can not connect from internal network
I created 3 intances in same VPC and same subnet.
2 instances A,B use same security group: WebSG (id: sg-ab)
instance C use security group: DbSG (id: sg-onlyc)
In WebSG, I add rule Alltraffic from ...
1
vote
1
answer
146
views
Firewall : is inbound rule required for getting SYN-ACK from the server while outbound rule already there?
I have a VPC, within which I have a EC2 instance deployed in private subnet.
I have my NACL(Subnet firewall) ALLOW ALL on inbound and outbound.
I have my security group rule(Ec2 firewall) , It ...
- 11