[SOLVED] Securing data in a packet

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
jlatieule
Messages: 59
Registration: July 3, 2019 - 9:18 AM

August 16, 2022 - 08:40

Hello,


I'm setting up access to the WAPT server from our DMZ, and it will be accessible from the outside.

The problem is: I have a packet containing usernames and passwords that must not be intercepted during an intrusion.

Is there a recommended method for securing this type of information?
Last edited by jlatieule on August 17, 2022 - 3:52 PM, edited 1 time.
System and Network Administrator at Domitia Habitat
jlatieule
Messages: 59
Registration: July 3, 2019 - 9:18 AM

August 17, 2022 - 12:49

Thanks Simon for the feedback, I couldn't find that documentation again.

Follow-up question:

If a brand new workstation added to the server wants to install the encrypted package, it won't be possible because the client's private key wasn't known.
Therefore, the package needs to be updated so that its key is correctly recognized.

Is that right?
System and Network Administrator at Domitia Habitat
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

August 17, 2022 - 3:44 PM

Yes, absolutely!
jlatieule
Messages: 59
Registration: July 3, 2019 - 9:18 AM

August 17, 2022 - 3:53 PM

Great!


I'm marking this topic as resolved (for future reference).
System and Network Administrator at Domitia Habitat
Locked