Unauthorized Devices on Network

gregmcc said:
Not really effective in stopping someone from getting access. MAC spoofing gets around this easily.
Click to expand...
I don't get this though. A guy plugging in a laptop in a boardroom won't attempt to spoof a MAC address. Why take the Nuke option?
Edit: response below answered the question.
 
Last edited:
|tera| said:
I don't get this though. A guy plugging in a laptop in a boardroom won't attempt to spoof a MAC address. Why take the Nuke option?
Click to expand...
If you trying to stop someone just plugging in, then sure, static IPS etc
If you trying to stop an attack vector, then static IP's just slow me down, I can use a script to cycle through IP blocks and find things pretty quickly. Mac address spoofing - again easy attack vector. Arp tables are wonderful...

if you want to protect then NAC is the way to go to get into a privileged VLAN else get put on never never vlan or some basic guest vlan.
 
|tera| said:
I don't get this though. A guy plugging in a laptop in a boardroom won't attempt to spoof a MAC address. Why take the Nuke option?
Click to expand...
Most attacks come from inside the network. Disgruntled employees, someone about to get fired. What's the physical security like? In most cases getting access to the building is fairly easy via social engineering / tail gating. If you have badges to open doors would you hold the door open if there was a hot blonde behind you? When last did you see someone you didn't recognise and ask who they are and what they are doing. Difficult in larger companies as not everyone knows everyone else.
 
gregmcc said:
Most attacks come from inside the network. Disgruntled employees, someone about to get fired. What's the physical security like? In most cases getting access to the building is fairly easy via social engineering / tail gating. If you have badges to open doors would you hold the door open if there was a hot blonde behind you? When last did you see someone you didn't recognise and ask who they are and what they are doing.
Click to expand...
Cool. Thanks for the explanation. Regarding the hot blonde. Depends though. If she's there as a diversion, I'll use my spidey sense :p
 
|tera| said:
Network Access Control seems to be a winner. Do you need a Unix based Server, or does it run on Windows? (the links you posted).

Thanks for the info.
Click to expand...
OpenNAC comes in the form of VM, source or Redhat packages
Packetfence is Redhat and Debian (Ubuntu) packages
 
Nod said:
OpenNAC comes in the form of VM, source or Redhat packages
Packetfence is Redhat and Debian (Ubuntu) packages
Click to expand...
Thanks. Will give the VM a shot sometime.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X