[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Testing Firewall-1
-- Original Message -- >I would like to know how I can test my Firewall-1 for security holes. >Is there any utility or shareware in the market to test it. Hi Rales! Well... First of all I hope you hardened your Operating System Installation (See Lance's papers if you don't. http://www.enteract.com/~lspitz/ ). If you harden your installations, is less possible to have open holes to the world. You may find useful http://www.enteract.com/~lspitz/audit.html too... ;-) Then, you may try Commercial Vulnerability Scanners to detect holes in your "final installation". ISS' Internet Scanner and NAI's CyberCop Scanner are two choices. In the free software market we have excellent tools like Nessus, NMap, SARA and Firewalk to try to see exposures... Just do a search for them... ;-) Now, if you don't have idea how tools are used, or what to expect for a "normal" or "bad" behaviour... hire a consultant! Some offer penetration testing services and this may be another good approach to see how "hard" is your installation... ;-) Hope this helps. BR. -- Martin Humberto Hoz Salvador Information Security Consultant (ISS ICU, Check Point CCSE) Corporacion en Investigacion Tecnologica e Informatica, S.A. de C.V. Sendero Sur 285 Col. Contry, Monterrey, Nuevo Leon 64860, MEXICO Phone: +(52)(8) 357-2267 x135 Fax: +(52)(8) 357-8047 E-mail: [email protected] WWW: http://www.citi.com.mx PGPKey ID: 0x0454E8D9 ICQ Number: 31631540 "Customer service is not a department... it's an attitude" ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|