topic RE: NAC "device type" shows "Linux Backtrack 1.0" in ExtremeCloud IQ- Site Engine Management Center

NAC "device type" shows "Linux Backtrack 1.0"

Bernd_Gruetzke — Wed, 23 Jan 2019 15:13:00 GMT

Hello anybody,

some devices show in NAC as "device type" Linux backtrack, but these are NAS systemes. Is there a security hole or is it a false indication?
Manufacturers are QNAP Systems, Inc., ICP Electronics Inc.,TP Vision Belgium N.V...

Best Bernd

RE: NAC "device type" shows "Linux Backtrack 1.0"

Tomasz — Wed, 23 Jan 2019 15:42:00 GMT

Hello Bernd,

Most likely those devices are recognized as Linux by DHCP Fingerprinting capability of NAC, their software is built upon Linux perhaps?
The approach assumes that a device asks for certain parameter numbers in DHCP option 55, and NAC stores some patterns which, when matched, let's you know what is the system type.
You can create an override like here: https://getsatisfaction.com/extreme/topics/create-a-extremecontrol-nac-dhcp-fingerprint

Hope that helps,
Tomasz

RE: NAC "device type" shows "Linux Backtrack 1.0"

Bernd_Gruetzke — Wed, 23 Jan 2019 21:05:00 GMT

Hi Tomasz,

Thank you for helping me. I'll correct that in NAC.

Best Bernd