Verify that our hardening has been successful

Run the exit command to switch back to our standard user then re-run the port scan from earlier by executing nmap 192.168.40.0/24

Info

The port scan will take significantly longer to run this time as much the network is effectively invisible to our compromised host. Those among us who are impatient can press the enter key to get an update on how far along the port scan is.

You will notice that the port scan reported zero results this time around as our microsegmentation rules do not allow communication on the 192.168.40.0/24 network.

Furthermore we are unable to view the mounts on the fileserver we accessed earlier or download any employee records.

However our rules still do allow access out to the Redhat OS patch servers and some specific internal services such as dns. We are microsegmented but not completely disconnected from the rest of the world. This is because our server requires some degree of access in order to still accomplish it’s mission.