OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: DHCP and Security
From: Bryce Walter (brycewalterHOTMAIL.COM)
Date: Fri Feb 04 2000 - 07:37:10 CST

Assuming your LAN is using WINS, its pretty trivial to check the WINS
mappings to find the NetBios name thats using a specific IP. MS's WINS
server will often have the user name mapped to the IP in addition to the
computer netbios name. Don't know about non-MS NetBios name servers though.

Bryce Walter

>Need a policy read folks:
>
>The system I "manage" has 3200 users at various locations throughout the
>world, managed by a central NOC. Our firewall permissions (protocol and
>port) are highly restrictive and report any unauthorized actions (ftp,
>pings, finger,.....). The NOC gets a report from the firewall indicating
>which IP was the "offender". If I the LAN clients are configured with
>static IP's, it's easy to attribute the offending action with a LAN client,
>but with DHCP (which is the method of choice for our sys admin types), it
>has proven difficult to "map" an IP address back to a specific user...
>lease
>times expire, inadequate event logging..etc.
>
> How can I configure DHCP to balance the need for security with the wishes
>of the sys admin folks? Any Ideas?
>
>Rob Nitzenberger
>thenitzemail.com

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com