Forum
5

Is TLS for syslog worth it on an internal network?

asked by rk_ops 4 days ago

Everything is on our own VLANs. Is plain TCP acceptable or does that get written up?

1 answer

Sign in to answer.
gerald (Gerald) 9 points 3 days ago

It gets written up.

Logs contain usernames, internal addresses, and periodically a password somebody typed into the username field. That is exactly what an attacker already inside your network wants to read.

You will spend longer arguing the exception than turning it on.

Guidelines Newest Search Back to Trunc