Strengthening Sophos & Perimeter Security
Enforcing endpoint discipline, protocol routing, and domain controls across institution networks.
| ID | Severity | Vector & Impact | Target Layer |
|---|---|---|---|
| SEC-01 | High |
Microsoft Extension Store accessible to students
Permits installation of proxy & VPN extensions, circumventing Sophos domain policies.
|
Browser Policy |
| SEC-02 | Medium |
DNS-over-HTTPS (DoH) fallback unblocked
Standard DNS queries encrypted via public resolvers, evading domain inspection.
|
Sophos Firewall |
| SEC-03 | Low |
NTP and NetBIOS outbound port exposure
Unrestricted broadcast protocols leaking internal subnet topology.
|
Local Subnet |