Network encryption

[bilbonvidia]

Hi. By default is network (wired ethernet) traffic on a windows 2003 network encrypted. ie would a network sniffer be able to see passwords etc if plugged into it?

 

[kmcferrin]

No, by default the traffic is not encrypted. But the passwords are encrypted when they're being sent to the server, so you can't just read them with a sniffer.

 

[pagy]

You might be interested on checking out this link;

http://www.microsoft.com/windowsserver2003/technologies/security/kerberos/default.mspx

AD uses Kerberos authentication and the above link tells you all about kerberos authentication

As for encryption on the wire in a windows network you would need to look at PKI

http://www.microsoft.com/windowsserver2003/technologies/pki/default.mspx

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[pagy]

Of course what I actually meant to say for encryption was Ipsec

http://www.enterprisenetworkingplanet.com/netsecur/article.php/3489911

I've had a bad day

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[bilbonvidia]

Thank you, very helpful. I have heard of admin passwords being cracked during penetration testing using this method and I don't want to be vulnerable to that. Oh the joy of ticket granting tickets!