3 ms·
Replying just to add another idea that came to me after hitting submit. Use the network-namespaces feature of linux(assuming this data resides on linux). Then y
by module0000 10y ago
Replying just to add another idea that came to me after hitting submit. Use the network-namespaces feature of linux(assuming this data resides on linux). Then you can create the equivalent of a hidden span-port, letting you inspect all the IP traffic at your leisure - including the traffic that contains customer data.
- Johnny555 10y agoIf someone can snoop traffic and see confidential data, you're not very serious about security - no confidential data is sent off-server without being encrypted. (SSL mostly, with point to point VPN tunnels for a few apps that don't support encryption natively)
- module0000 10y agoThat's very true - if data is leaving unencrypted then they have made a mistake. This is an easy mistake to make though if you bank on your LAN being truly private. However, on the other side of the coin...lots of traffic is unencrypted by design(NFS 1x,2x,3x, and 4x unless you use krb5p, and iscsi).