3 ms·
This is an interesting question post-pandemic where the network the laptop is using may be an employees home network, especially if there is some kind of active
by alasdair_ 4y ago
This is an interesting question post-pandemic where the network the laptop is using may be an employees home network, especially if there is some kind of active scanning involved.
- MadsRC 4y agoThis is a real problem, especially for InfoSec tools. Many EDR tools, such as MS Defender for Endpoint (or whatever it’s called these days) and Crowdstrike Falcon, include functionality that will scan your local network for devices in order to discover unmanaged devices… It’s a nightmare from a privacy point, but its also a problem for the InfoSec tools… How do they distinguish between an unmanaged private device on a private network or a unmanaged device on a corporate network?
- oarsinsync 4y ago> its also a problem for the InfoSec tools… How do they distinguish between an unmanaged private device on a private network or a unmanaged device on a corporate network? Trivially, from the simplistic (check IPs and router MACs / SSID in use) to the marginally more advanced (deploy an agent that is only reachable from the corporate network) to determine if the tool should even be running in the first place.
- soraminazuki 4y agoEvery home router should make it easy for people to create separate VLANs for work to protect against this.
- pyinstallwoes 4y agoVLAN's aren't security. No way to force respecting the protocol.
- JonChesterfield 4y agoTag on the switch port?
- pyinstallwoes 4y agoMeta data leaks in frames and devices shown not to be reliable on 'respecting' boundaries.
- JonChesterfield 4y agoIt's really difficult to find solid guidance on how secure that is. E.g. tag the port on the switch, run a cable to the device so that it doesn't know there's a vlan involved, block routing between vlans. As far as I can tell that's probably good but might not be.