intermediate·20 min·Pago
Overly Broad Firewall Rule
Monitoring system flags guest Wi-Fi reaching the payroll server
Cenário
The security monitoring platform flagged an anomaly: a device on the guest wireless network successfully connected to the payroll application server. That should not be possible under company policy — guest Wi-Fi is only supposed to reach the Internet, nothing internal. Investigate how this is happening and lock it down without breaking guest Internet access or legitimate employee access to payroll.
Objetivos de aprendizado
- acl
- nftables
- least privilege
Topologia e configuração
Este ambiente contém 5 dispositivos (4 Hosts, 1 Router). Você configura e resolve problemas nas habilidades de redes listadas acima.