Ask Lemmy

26890 readers

1726 users here now

A Fediverse community for open-ended, thought provoking questions

Please don't post about US Politics. If you need to do this, try !politicaldiscussion@lemmy.world

Rules: (interactive)

1) Be nice and; have fun

Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them

2) All posts must end with a '?'

This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?

3) No spam

Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.

4) NSFW is okay, within reason

Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].

5) This is not a support community.

It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.

Reminder: The terms of service apply here too.

Partnered Communities:

Logo design credit goes to: tubbadu

founded 1 year ago

MODERATORS

candyman337@lemmy.world

Bluetreefrog@lemmy.world

TheSaneWriter@lemm.ee

TheSaneWriter@lemmy.thesanewriter.com

candyman337@sh.itjust.works

Asudox@lemmy.world

can@lemmy.ca

lemmy_bot@lemmy.world

beefbaby182@lemmy.world

asudox@discuss.tchncs.de

Will enterprise endpoint protection software on my laptop have control over what is happening inside a VM? (feddit.org)

submitted 3 months ago by superkret@feddit.org to c/asklemmy@lemmy.world

8 comments fedilink hide all child comments

I've been issued a work laptop with Windows 11, running the Sophos Endpoint Agent, which monitors all web traffic and processes running on the PC and blocks malicious stuff.
If I install a Linux VM on it and access the web from inside it, will the Endpoint Agent see what I'm doing and be able to block access the same way as it does on the host?

I guess what I'm asking is, how does accessing a website from inside a VM work, actually? Does all the traffic get routed through the host OS unencrypted?

The purpose isn't to try to circumvent any security measures or go over the heads of the IT department, but rather to find out if I can make a case for using my favorite OS on this thing without compromising security.

you are viewing a single comment's thread
view the rest of the comments

[–] savvywolf@pawb.social 3 points 3 months ago (1 children)

I don't know for sure, but I don't think they'd be able to read https traffic. That would be encrypted on the vm itself before being sent to the host, so the host couldn't see it.

If they're scanning your system remotely for unapproved software, I imagine they won't let you use a vm at all, since it kinda breaks that requirement.

[–] Tar_alcaran@sh.itjust.works 6 points 3 months ago (1 children)

I don't know for sure, but I don't think they'd be able to read https traffic. That would be encrypted on the vm itself before being sent to the host, so the host couldn't see it.

But they're able to access your screen, keylog you and read your HD. No need to read https if you can access what the user sees and does

[–] Quazatron@lemmy.world 6 points 3 months ago (1 children)

Also your DNS traffic will leak what you are doing.

Just follow the most upvoted answer and keep personal stuff on your personal PC or mobile if you want to avoid trouble.

[–] user224@lemmy.sdf.org 1 points 3 months ago

You can use DoT or DoH.

But you will still leak SNI.