Can a rogue device plugged into our network be detected?
Often, if it talks. A small computer or Wi-Fi bridge hidden under a desk has to reach the attacker, so it shows up as a host making outside connections, often at regular intervals. Check your switches for unknown MAC addresses and use port security or 802.1X where you can. NetSenX sees the traffic of hosts on monitored segments and flags beaconing and unusual connections; a device that stays silent, or sits on a segment you do not monitor, stays out of view.
We use strictly necessary storage to run this site. With your permission, we also use PostHog, hosted in the EU, to count visits and page views so we can improve the site. Nothing is measured until you allow it, and you can change your choice at any time. Details in our cookie policy.