CS KAIROS · LEARNING LIBRARY
M12 · Evading IDS, Firewalls, and Honeypots · Safe practice
This module uses offline data, self-created inputs or tabletop scenarios. Follow the steps and check the evidence you produce.
Offline exercise: a control matrix
Fill a synthetic table without changing firewalls or monitoring.
- Create visitor→443 and visitor→administration-port rows.
- Enter expected and observed outcomes and log presence.
- Identify the rule needing correction and the observation requiring follow-up.
Expected result
Restore legitimate 443 access, retain the administration denial and check logging requirements separately.
Check your work
Why does blocking every flow not necessarily pass acceptance?
Finish and clean up
Keep the matrix; no real rules require rollback.