nothing is immune to fingerprinting, but the Cisco device is probably
just looking for Windows boxes. If it isn't a Windows box then it
should ignore it. It might even recognise a BSD box and skip it.  If
ll else fails he can just claim that it is Linux.

What is the Cisco device that is doing the checking?

sai

On 10/16/06, DarkFoon <[EMAIL PROTECTED]> wrote:


Hi everybody.
A friend of mine recently informed me that his college is going to be adding
some "policy enforcement" devices (Cisco brand) to their network that will
push Symantec Security software onto all computers on the campus network. If
your computer doesn't meet the policy, it is denied internet access.
Linux computers are exempt frm this for some reason (yeah *BSD != linux, I
know).
He doesn't want this Norton garbage pushed onto his PC, so he asked me if a
firewall like pfSense would stop this nonsense. However he says that the
machine must "look" like a Linux box to the campus "policy enforcement"
device.

My questions are: is pfSense immune to fingerprinting? Or can I alter the
values it reports back?
Also, do you think this would even work? (Would it trick the policy
enforcement and allow him access through it?)

I ask because you are the experts. I no longer have the free time I once had
to research this myself (being a student also), so I am asking for the
knowledge that comes with experience in the field.

I understand that this question is a little "out there" and highly
off-topic; my apologies if it belongs elsewhere.

Thanks you very much in advanced.
-a Rossi

Reply via email to