netbird icon indicating copy to clipboard operation
netbird copied to clipboard

Posture check to validate Approved peer

Open ez1976 opened this issue 10 months ago • 2 comments

Hi. since at the moment, anyone can install the netbird app, configure the URL and then just connect using our Okta IDP to the network, even from the virus farm called "Home Computer"

it would be great if you can add a "file check" Posture that we can push when installing the netbird (either remotely or manually) windows could be a registry value, but i think it would be best to do it by allowing us to place a file anywhere hidden (even with a generated string) and will allow us to add a posture check that only if the script exist and the file has that value - they will be able to connect.

thanks

ez1976 avatar Apr 11 '24 11:04 ez1976

Hey @ez1976 If you are using cloud, then you can enable the peer approval feature or an EDR integration. .

We also have a process and file check feature in progress: https://github.com/netbirdio/netbird/pull/1693

braginini avatar Apr 11 '24 13:04 braginini

Hi thanks but i have the self hosted. the idea is not to have to enable each peer but to allow only those who has a company computer to be able to connect

On Thu, Apr 11, 2024 at 2:21 PM Misha Bragin @.***> wrote:

Hey @ez1976 https://github.com/ez1976 If you are using cloud, then you can enable the peer approval feature https://docs.netbird.io/how-to/approve-peers or an EDR integration. https://docs.netbird.io/how-to/endpoint-detection-and-response.

We also have a process and file check feature in progress: #1693 https://github.com/netbirdio/netbird/pull/1693

— Reply to this email directly, view it on GitHub https://github.com/netbirdio/netbird/issues/1832#issuecomment-2049682822, or unsubscribe https://github.com/notifications/unsubscribe-auth/AANTDD5S7RI4GHX34CBAG33Y42E6PAVCNFSM6AAAAABGCD2SNGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANBZGY4DEOBSGI . You are receiving this because you were mentioned.Message ID: @.***>

ez1976 avatar Apr 11 '24 13:04 ez1976