Protecting your internal networks
An internal network test, also known as a network penetration test, is a detailed analysis and review of the security architecture of your internal IT infrastructure. This test focuses on the examination of Active Directory environments, Linux and Windows machines as well as file servers. For manufacturing companies, it also covers operational technology (OT) networks and their connection to the office IT. The aim is to identify potential vulnerabilities that may arise from misconfigurations, outdated software or unsafe practices.
As part of the test, we also review the hardening of your server and client operating systems to uncover misconfigurations, outdated settings and unnecessary attack surface. The systems are analyzed against industry best practices and hardening standards (e.g. CIS Benchmarks, BSI, NIST).
Motivation
In today's digitalized working world, internal networks are the backbone of many companies. They often contain sensitive data, trade secrets and personal information that is of great importance. A successful attack on your internal systems can have serious consequences, including data loss, business interruption and financial damage. It is therefore crucial to conduct regular security audits to ensure that your internal networks are protected against cyber attacks.
Operating systems deserve particular attention: OS misconfigurations, weak default settings or missing security controls give attackers easy entry points and can lead to privilege escalation, data loss or complete system compromise. While many organizations focus primarily on application or network security, insufficiently hardened operating systems remain a frequent source of vulnerabilities. A structured hardening analysis uncovers these hidden risks, supports compliance with security standards and significantly increases the resilience of servers and clients against modern attack techniques.
OT networks in manufacturing
Many of our clients are manufacturing companies whose production depends on OT networks with PLCs, HMIs, SCADA systems and engineering workstations. These systems often run for decades, cannot simply be patched and were never designed with security in mind. At the same time, the boundary to the office network is often weaker than expected, so an attacker who compromises a single office computer may be able to reach the production floor.
We know that in production, availability comes first. That is why we handle OT systems with particular care:
- Careful planning: We agree on the scope, test windows and the permitted test methods with your production and maintenance staff in advance.
- Passive before active: We start with passive analysis of network traffic and configurations and only use active techniques where they are safe and agreed.
- No aggressive tests: We do not run aggressive scans, fuzzing or denial-of-service tests against sensitive controllers, and we keep the network load low.
- Close coordination: During the test we stay in direct contact with your team and pause or stop immediately if a system shows unusual behavior.
This way, you get a realistic picture of the security of your OT environment without putting your production at risk.
What we offer
At rasotec, we offer comprehensive testing of your internal networks, tailored specifically to your organization's security needs. Our services include testing the following systems:
- Active Directory: we check your Active Directory for possible insecure configurations, weak passwords and insufficient access rights. The aim is to strengthen the security of your identity and access management.
- Linux and Windows machines: Our experts carry out detailed security tests on your servers and workstations to identify vulnerabilities caused by outdated software, missing patches or insecure configurations.
- Linux server hardening: Review of system services, package management, permissions, logging, firewall and SSH configuration, kernel parameters, and alignment with CIS/BSI hardening guidelines.
- Windows server hardening: Assessment of Active Directory roles, Group Policies, patch levels, services, authentication settings, audit policies, and server-specific hardening controls.
- Windows client hardening: Evaluation of workstation security settings, user privilege management, endpoint protection integration, local policies, update mechanisms, and compliance with hardening baselines.
- File servers: We analyze your file servers (e.g. FTP or SMB) for security vulnerabilities that could allow unauthorized access to sensitive data. This includes checking authorizations, encryption and other security-relevant settings.
- Mail servers: We check mail servers for various spoofing attacks and the use of outdated components. We also check the DKIM, SPF and DMARC configuration.
- Web applications: We test internal web applications for injection vulnerabilities, incorrect authentication and disclosure of sensitive data. In doing so, we enumerate hidden application parts or HTTP paths.
- OT networks: We review the segmentation between office IT and production networks, remote maintenance access, and the configuration of PLCs, HMIs, SCADA systems and engineering workstations, always with the availability of your production in mind.
- Peripheral devices: We check printers, routers, switches and other devices for weak configuration and the use of default passwords.
- Cryptography: We check all services for the use of outdated cryptographic methods and protocols. We document weak cipher suites as well as missing encryption, authentication and integrity checks.
Our experienced security experts use a combination of automated tools and manual techniques to obtain a comprehensive picture of the security situation of your internal networks. We thoroughly assess system configurations, user and permission management, logging and monitoring, patch levels and security policies.
After the test, you will receive a detailed report that not only highlights the vulnerabilities found, but also recommends specific measures to rectify and improve security, including prioritized, actionable guidance for hardening your operating systems.
Protect your company with a professional internal network test from rasotec and minimize the risk of cyber attacks and data loss, with servers and clients that are secure, compliant and resistant to modern cyberattacks.