Inside the Company

An internal connection deserves investigation too. A compromised office computer might try to reach a server’s administration service.

Lumen groups computers into zones, such as office, retail and servers. Inspect a machine to see its zone and services:

seclab machine demo-shop

Look for these lines:

demo-shop: demo-shop, owner maya, zone servers
services:
service  port  version  status      open from
admin    22    1        up to date  internet, office, servers, retail, payments, storage
https    443   1        up to date  internet, office, servers, retail, payments, storage

Webstore belongs to servers. Port 443 handles shop traffic; port 22 is its administration service. Those uses need different access rules.

A zone describes where a computer belongs. It does not prove that every computer in it is safe. Compare an internal connection with the work its source is meant to do.

For this practice finding, record the destination’s zone:

seclab answer zone servers

You should see:

Recorded your answer to zone.