intermediate·20 min·مدفوع
Audit IoT VLAN Internet Scope
Confirm the IoT VLAN really can only reach the firmware update service, nothing more
السيناريو
The building's IoT VLAN (smart thermostats, badge readers, and similar devices) was set up under a strict policy: these devices may reach only the manufacturer's firmware update service on the Internet, nothing else outbound, and nothing from the Internet may initiate connections to them at all. It's been running for a while with no complaints, which is exactly why nobody has double-checked that the implementation actually matches the policy. You've been asked to verify it does, ahead of a security review.
أهداف التعلّم
- acl
- nftables
- least privilege
الطوبولوجيا والإعداد
تحتوي هذه البيئة على 4 جهازًا (3 Hosts, 1 Router). تقوم بإعداد واستكشاف أخطاء المهارات المذكورة أعلاه وإصلاحها.