Sign in

flat network at a small warehouse. how worried should i actually be?

Solvediotnetwork-designvlan9 replies · 327 views · started
Reply
Accepted solution by Omar — the minimum useful setup is three segments: staff, guest, IoT. default deny from IoT to staff, allow staff to IoT only on the ports needed…
  1. Elena J.
    @elena_frame

    ok weird one our smart TVs at a small warehouse get firmware updates maybe once in their lifetime. They sit next to computers with sensitive data. i want to isolate them, but Im worried about discovery and casting breaking. Whats ur experience?

    Some of these smart TVs were installed by external contractors who still need remote access for maintenance. That complicates things a bit. How do you handle vendor access in a segmented setup without poking big holes??

    rage

    2
  2. Omar
    @cipherbuilder-2n0

    Printers are the classic pain. Either keep printers on the staff VLAN, or add a firewall rule allowing staff to reach printer ports (IPP 631, raw 9100) and use a print server.

    1 2 helpful
  3. Yusuf Pereira
    @late_ranger303

    ahh classic for me it was the thermal paste. swapped it and boom, fixed

    2 0 helpful
  4. Vera Silva
    @vera.silva

    ps how is this thread still going lmao. honestly just reset the firmawre and save yourself teh pain

    30 2 helpful
  5. Yusuf Pereira
    @late_ranger303

    hmmm segmentation is worth it mainly because many printers run old, rarely patched firmware... putting them on their own VLAN with firewall rules that block traffic toward staff networks limits what an attacker can reach from a compromised device. good luck man!

    0 1 helpful
  6. Omar
    @cipherbuilder-2n0
    Accepted solution

    the minimum useful setup is three segments: staff, guest, IoT. default deny from IoT to staff, allow staff to IoT only on the ports needed (for example, teh camera NVR web UI or printing ports).

    1 11 helpful
  7. Yuki V.
    @yukiv121

    have u checked ur warehouse settings? mine were reset after an update

    2 0 helpful
  9. Yuki V.
    @yukiv121
    in reply to @lambda_den

    hmmmm not sure about that id argue teh bigger win is patching and changing default passwords on the printers. segmentation without that is half a fix. just my 2 cents

    9 6 helpful

Reply to this topic

Sign in or create an account to reply.