A traffic mirroring session may be created or its target modified so that full packet copies of network traffic are delivered to a resource that is not an authorized monitoring destination. Plaintext payloads and credentials within the mirrored traffic are exposed, impacting the confidentiality of data.
Mirrored Traffic is Delivered to Unauthorized Destinations
CCC.VPC.TH13
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP18 | Traffic Mirroring | The service can be configured to copy network traffic from selected network interfaces to a monitoring destination for out-of-band inspection. Azure offers this only in preview. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN12 | Restrict Traffic Mirroring Targets | Ensure that mirrored packet copies are only delivered to authorized monitoring destinations and that every mirroring session is visible. |