FlowViewer Security
As mentioned, anyone who can access FlowViewer can see everything about your internal network. A skilled intruder would find this irresistible. Others will just annoy you: Unskilled visitors, such as your help-desk staff, will probably misinterpret FlowViewer's results and make you spend time explaining why they're wrong. For this reason, I strongly recommend password protecting the FlowViewer website and restricting the IP addresses permitted to access the server. Using HTTPS, even with a self-signed certificate, will protect your user credentials and data in transit.
FlowViewer's default install also uses a world-writable directory to store reports. This is a security risk, particularly on a multiuser system. If you're using ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access