Follow the Whole Order

Part of the Stopping the Spread section of Coddy's Cybersecurity journey. Lesson 3 of 20.

A customer can reach a shop website and still be unable to pay. Useful work often depends on more than one connection.

Inspect the checkout operation:

seclab inspect operations demo-sale

You should see:

demo-sale:
  Description: Accept a shop order and its payment
  Connections: [
  "demo-order",
  "demo-payment"
]
  Working: yes

It lists demo-order and demo-payment. Both must work. Check the payment connection:

seclab probe demo-payment

You should see:

demo-shop -> pay-gateway:443
Allowed: allowed (rule 1)

This practice route is allowed. If it were blocked, its reason would help you choose the next record to inspect.

Follow the operation from beginning to end. Restoring the first connection is not enough if a later connection still fails. After a repair, inspect the operation again to confirm that the whole request can succeed.

Challenge

Easy

Ticket from Sam, IT lead

Customers can now place orders, but payment still fails after gateway maintenance. Find the broken connection in checkout and restore the approved payment process. Make the complete checkout operation work while keeping the dispatch backup available.

Try it yourself

Terminal

All lessons in Stopping the Spread

1Trace the Connection

Follow a Connection Test a RouteFollow the Whole OrderInside the Company Orders Without Payment

4Recover and Verify

Prove the Block Recover in Stages Report the Impact Review the Boundary Lumen Stays Open

2Close the Unwanted Route

Destination Rules Rule Order Outbound Rules Allow the Needed Work Two Unwanted Routes

3Contain More Than One Computer

Isolate a Computer The Exposed Password Follow the Spread Keep Customers Working Two Active Computers