topic RE: Is a mirroered port is safe against the Cyber attacks in ExtremeSwitching (EXOS/Switch Engine)

Is a mirroered port is safe against the Cyber attacks

Ajish_CL — Mon, 02 Jan 2017 14:21:00 GMT

I have mirrored a port (Summit series) in my system network for packet sniffing using a desktop which is connected to internet. My system network is physically and logically segregated from Internet apart from the mirrored port. Can a hacker access my System Network through mirrored port

RE: Is a mirroered port is safe against the Cyber attacks

OscarK — Mon, 02 Jan 2017 14:40:00 GMT

Hello, in Theory it could be possible as your windows PC still listens on that port to all packets. Every mirrored packet enters your desktop so if a hacker can craft a packet that your laptop will send to its CPU it could gain access. Best practise is to disable the IP stack (ipv4 and ipv6) on that port.

RE: Is a mirroered port is safe against the Cyber attacks

Ajish_CL — Mon, 02 Jan 2017 14:40:00 GMT

Thanks OscarK for your reply.

Further to the above query, I read in Internet that the Port mirroring in fact convert the port to a unidirectional link. i tried to do telnet and ping test to my system network, but nothing was working.

I am a newbie to networking, if question is not making sense please let me know

RE: Is a mirroered port is safe against the Cyber attacks

OscarK — Mon, 02 Jan 2017 14:40:00 GMT

The mirror-to port where you are connected to is not part of any vlan so all packets from your PC are dropped. Sorry, I looked at your question wrong.

RE: Is a mirroered port is safe against the Cyber attacks

Ajish_CL — Mon, 02 Jan 2017 14:40:00 GMT

You mean that in this case, no one can access the network through the mirrored port

RE: Is a mirroered port is safe against the Cyber attacks

OscarK — Mon, 02 Jan 2017 14:40:00 GMT

Yes.

RE: Is a mirroered port is safe against the Cyber attacks

Ajish_CL — Mon, 02 Jan 2017 14:40:00 GMT

Thanks for the Information. It was really useful