ネットワークセキュリティ監査の簡素化にも有効な手法をご提案

NetAllyChannel Account Manager
Japan & S.Korea

杵鞭 俊之© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 1

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 2

Novelty© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 5
Source: https://www.entrepreneur.com/article/368943

プロビジョニング

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 6

Security Landscape••••Portable
2x RJ-45
1x Fiber/SFP+2x Wi-Fi Radios✓ 4x4 Promiscuous✓ 1x1 Connectivity• BT/BLE Radio• Connectivity Validation• Advanced Analysis✓ Network Discovery✓ Wi-Fi Analysis✓ Path Analysis✓ Capture• Layer 1 to Layer 7✓ L1:TDR/BERT/PoE✓ L7:EURT© NetAlly - Confidential & Proprietary• Remote operation
simplicity • visibility • collaboration | 7• CollaborativeSite Infrastructure, Access and Devices
Cloud/Data Center
Backbone
Sites
Aggregation
Access/Edge

Devices
Clients
Endpoints
 sprawl →より複雑化SiteFunction: Services, Storage, VM, Phone, AP, Printer, ….
OS: Win, Mac, Linux
IoT/Headless
Legacy: 802.11b, WEP, 10M, SNMPv2, …
BYOD

SSID xSSID yVLAN1 VLAN2
Segmentations❑ Department❑ User❑ Overlay (VoIP, Surveillance, …
❑ Legacy

Use Models
有線環境 アセスメント• 情報コンセント(PoE, VLANs, Subnets)• アクセスプロビジョニング検証• 通信到達• ディスカバリと問題• 端末エミュレーション (MAC spoofing)

RF アセスメント• AirMapper サーベイ
• AP/Client 位置• BLE サーベイ

HandheldDrop-in• リモート対応• 手軽なモニタリング• Discovery/Wi-Fi Snapshots© NetAlly - Confidential & Proprietary

解析• Network デバイス
• Networkの変更• Wi-Fi / RF セキュリティ• レポート

simplicity • visibility • collaboration | 10

Provisioning© NetAlly - Confidential & Proprietary

Source: Verizon 2020 Data Breach Investigations Report (DBIR)

simplicity • visibility • collaboration | 11© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 12

© NetAlly - Confidential & Proprietary

❑❑
❑
❑
❑
❑
❑
❑
❑

Cable/patch panel/switch confusion
Default passwords and community strings, simple passwords
Out of box plug and play enabled
Dashboard/CLI disparity, saving provision changes
DHCP pools/inter-VLAN routing/radius/NTP/Segmentation: VLAN assignment
Quality of Service
Power distribution
Legacy devices
simplicity • visibility • collaboration | 13

reddit.com/r/cablefail© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 14

Provisioning: Defaults

プロビジョニング検証© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 16

AutoTest© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 17

プロビジョニング検証: AutoTest© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 18

DHCP 2nd Offer 検知セグメンテーション© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 20

セキュリティに関する懸念
アプリケーションサーバとその他ネットワークがセグメンテーション（分離）されていない。

正しくセグメンテーションすることにより、リスクを大幅に軽減する事が可能となる。
© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 21

© NetAlly - Confidential & Proprietaryadvisory.kpmg.us/content/dam/advisory/en/advisory-institute/pdfs/2017/network-segmentation-imperative.pdf

simplicity • visibility • collaboration | 22

VLAN セグメンテーション© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 23

Wired セグメンテーション© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 24

Filters

simplicity • visibility • collaboration | 25

Sorting

simplicity • visibility • collaboration | 26

Wi-Fi セグメンテーション© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 27

Wi-Fi セグメンテーション© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 28

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 29

無許可Wi-Fiの検出© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 30

Wi-Fi 解析© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 31

Breaking the Layer 2 CeilingWi-Fi Demo

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 33

迅速で簡単なサーベイ© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 34

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 35

60

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 37

Topologyマッピング© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 38

シングルウォークで多くの情報をPassive
SurveyAggregated Wi-Fi Analysis

Topology

Network Element Analysis

Simultaneous
1x1 Active

V1.5

異なるディスカバリ

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 40

ディスカバリ© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 41

ディスカバリの差分© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 42

© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 43

Thank you
E-mail： netally@keisokuki-land.co.jp
infoj@netally.com

http://www.keisokuki-land.co.jp/support/netally/© NetAlly - Confidential & Proprietarysimplicity • visibility • collaboration | 44