Collaborate Disseminate
Is the act of uploading to a repository like git controlled by an API service like api.github.upload which could then be restricted on our firewalls, rather than blocking the entire domain?
I’d be interested in hearing some feedback on this
We have an integration tool (i.e Jenkins) that’s used to run and deploy pipelines. Elsewhere there are other tools like atlassian etc.
We’re going to implement SSO with MFA but I have a qu… Continue reading Authentication steps when deploying to pipelines
We’re about to invest in an EDR. However, there’s massive heel-dragging on this.
The solution is SaaS – it would be an agent on hosts that then sends data back to a control element in cloud. It will go via a proxy and the connections are o… Continue reading Risk of SaaS-based endpoint agents [closed]
As per the title, I’m looking for insight on the crowdstrike sensor. Does anyone know if, on top of the outbound pt:443 access to the domains it requires, whether it also requires inbound connectivity?
Continue reading Crowdstrike Sensors – Do they need inbound, as well as outbound access?
We have a set of people who need to do a proof of concept for 9 weeks. To do that, they need to VPN to a well known IT company environment.
However, they want to be able to install the IT company’s VPN client (which is simply Cisco anyconn… Continue reading Client VPN, inside a corp network
I’ve got an issue with a proposed infrastructure set up so I come to you for some enlightenment.
The flow is: client –> fw–> waf–> api gw–> applications.
Clients will communicate with us using mtls. The fw can’t terminate mtls so it… Continue reading Insecurity through all the security. (Questions on infrastructure set up)
I am not a network expert but; a recent conversation has come up with a client asking to whitelist a range of ip’s (let’s say 250 odd for now) to transfer their data to us for processing.
I should add here that we would provide an IP addr… Continue reading The security of IP whitelisting large ranges