Alert unexpected security suites

nzymedefense / nzyme

Network Defense System.

https://www.nzyme.org/

Other

1.4k stars 145 forks source link

Alert unexpected security suites #1009

Open CableMate opened 7 months ago

CableMate commented 7 months ago

I found an altert, which is not comprehensible.

The advertised and observed suite are the same:

Monitored network "FRITZ!Box 6660 Cable perm" advertised with unexpected security suites "CCMP-CCMP/PSK,SAE+PMF_OPTIONAL"

Observed Security Suites CCMP-CCMP/PSK,SAE+PMF_OPTIONAL

The received suites are the same:

grafik

lennartkoopmann commented 7 months ago

Can you post a screenshot of the alert?

CableMate commented 7 months ago

I currently do not have one for a screenshot. But it did'nt contain more than

Monitored network "FRITZ!Box 6660 Cable perm" advertised with unexpected security suites "CCMP-CCMP/PSK,SAE+PMF_OPTIONAL" Observed Security Suites CCMP-CCMP/PSK,SAE+PMF_OPTIONAL

CableMate commented 7 months ago

General question:

Why is "CCMP-CCMP/PSK,SAE+PMF_OPTIONAL" unanticipated? Because of PMF_OPTIONAL?
"To prevent false alerts, it's crucial to update the nzyme network monitoring configuration when making changes to monitored networks": What could be configured?
"An authorized security configuration change of an access point might have been the cause": A change has to be compared with a configuration setting. But which one?