intermediate·20 min·有料
Overly Broad Firewall Rule
Monitoring system flags guest Wi-Fi reaching the payroll server
シナリオ
The security monitoring platform flagged an anomaly: a device on the guest wireless network successfully connected to the payroll application server. That should not be possible under company policy — guest Wi-Fi is only supposed to reach the Internet, nothing internal. Investigate how this is happening and lock it down without breaking guest Internet access or legitimate employee access to payroll.
学習目標
- acl
- nftables
- least privilege
トポロジーと設定
この環境には5台のデバイス(4 Hosts, 1 Router)が含まれます。上記のネットワーキングスキルを設定し、トラブルシューティングします。