10
What are You Working on Wednesday
(infosec.pub)
Did a website pentest - something I did not do for a while. Was very fun and we also had some interesting findings :)
What are you normally up to?
Security operating
Sounds like a fun assignment! Glad you got some interesting results!
Working on an Ansible playbook to configure our security baseline over all the network devices we manage.
Can you share any of the baseline that's not specific to your org/sensitive? What sources are you using as a reference?
I am using the Cisco hardening guide with some tweeks.
Covers things like only allowing sshv2, enable logging of commands to syslog, disabling the switch web servers.
Nice. You guys allowing the playbooks to configure or just audit?
we use the playbooks to configure, the trick is to do it in an idempotent way so when something is changed it doesn't kick off alarm bells.
SNMPv3 is my current bane as snmpv3 accounts are not stored in running config so snmp always says something is changed.
this post was submitted on 13 Mar 2024
10 points (85.7% liked)
cybersecurity
4413 readers
7 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
Enjoy!
founded 2 years ago
MODERATORS