intermediate·20 min·Payant
Overly Broad Firewall Rule
Monitoring system flags guest Wi-Fi reaching the payroll server
Scénario
The security monitoring platform flagged an anomaly: a device on the guest wireless network successfully connected to the payroll application server. That should not be possible under company policy — guest Wi-Fi is only supposed to reach the Internet, nothing internal. Investigate how this is happening and lock it down without breaking guest Internet access or legitimate employee access to payroll.
Objectifs d'apprentissage
- acl
- nftables
- least privilege
Topologie et configuration
Cet environnement contient 5 appareils (4 Hosts, 1 Router). Vous configurez et dépannez les compétences réseau listées ci-dessus.