Re: [FW1] Testing Firewall-1

[bandit@FW1-NOSPAMzcore.net (Carl E. Mankinen)]

Probably a combination of SystemScanner and InternetScanner is good.
(more money for ISS right?)

You can get Mnemonix tool (CIS) for free from Cerberus Info Systems,
and it tests some of the most common weakenesses around. Not sure how
complete it is.

SuperScan, nmap, saint(satan) etc should be run against it as well.

Try turning OFF the firewall services and testing your firewall SANS any
packet filtering...get it locked down, then turn the firewall services back on
again, and re-run all your tools. 

----- Original Message ----- 
From: "Chilton Tim" <tim.chilton@capco.com>
To: <rales_bessard@ssss.gouv.qc.ca>; <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Wednesday, October 04, 2000 9:27 AM
Subject: RE: [FW1] Testing Firewall-1


> 
> It's called a penetration test - look at ISS  (www.iss.net), the product is
> called Internet security scanner.
> 
> You can buy the experience and service from a vendor or do the attack
> yourself and try to interpret the results.
> 
> Regards
> 
> Tim
> -----Original Message-----
> From: rales_bessard@ssss.gouv.qc.ca
> [mailto:rales_bessard@ssss.gouv.qc.ca]
> Sent: 04 October 2000 14:12
> To: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: [FW1] Testing Firewall-1
> 
> 
> 
> 
> 
> Hi,
> 
> I would like to know how I can test my Firewall-1 for security holes.
> Is there any utility or shareware in the market to test it.
> 
> Thanks in advance
> 
> Rales
> 
> 
> 
> 
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
> ************************************************************************
> The information in this email is confidential and is intended solely
> for the addressee(s).
> Access to this email by anyone else is unauthorised. If you are not
> an intended recipient, you must not read, use or disseminate the
> information contained in the email.
> Any views expressed in this message are those of the individual sender,
> except where the sender specifically states them to be the views of
> The Capital Markets Company.
> 
> http://www.capco.com
> ***********************************************************************
> 
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================