0

Let's say there is a system that can set IP ACL for security. If administrator can't bypass IP ACL, account may by locked up when machine or network IP changed But if administrator can bypass IP ACL, then an attacker can bypass IP ACL when got administrator account. IP ACL gets meaningless.

Is there good way to mitigate both situations?

Improve this question
2
  • If your administrator account is compromised, you've got bigger problems and many other protections are rendered "meaningless". Commented Mar 21, 2022 at 5:53
  • When IP ACL enabled, attacker should hack physical device in IP ACL range, even if administrator account has been compromised. But this leads to losing control of IP is losing account. Commented Mar 21, 2022 at 11:10

0

Reset to default

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.