Re: [FW1] Freeware/shareware scanner to do an analysis against my FW-1

[Thomas Reinke <reinke@FW1-NOSPAMe-softinc.com>]

Given that you're an MS shop, don't want to pay for Cybercop/ISS
due to cost, and don't want to set up a Nessus (which as indicated
was recently reviewed as the best, albeit not perfect) scanner,
you may want to try some scanning services out there that will
do a decent job at very decent prices. 

E.g. http://www.securityspace.com/smysecure/index.html
uses Nessus, and has a whole slew of options for running audits,
including something called the "No Risk Audit", which basically
will let you run an audit for free, with it only telling you
IF it finds problems. While it doesn't help you if you do have
problems, it's great for running an audit and telling you
if you're clean or not.

We'll also extend, as a trial to this list only, (to see if there
is demand), an unlimited plan for 1 year - you get to run as
many Nessus audits (known as standard audits) as you like for
a period of 1 year from sign up, for $999 CAD.  For reference,
that's about $650 USD. (No strings attached other than the
physical limitation of audits bein run consecutively, and
an audit takes about 3 hours to complete, limiting you to
about 8-10 audits/day)

For the on-line stuff, 
check http://www.securityspace.com/smysecure/index.html
Anyone desiring to take advantage of the 1 year unlimited offer
above should get back in touch with me directly at
reinke@securityspace.com

Cheers, Thomas



Allan Pratt wrote:
> 
> Hi,
> 
> Many have sent me email suggesting Snort or Nessus.
> 
> To clarify our config, we are a total MS Shop.  The clients are windows NT
> workstation and the FW modules and config hosts are NT Server.
> 
> /Allan
> 
> ----Original Message Follows----
> From: Ken McKinlay <kmckinlay@dy4.com>
> To: 'Allan Pratt' <allan_pratt@hotmail.com>
> CC: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: RE: [FW1] Freeware/shareware scanner to do an analysis against my
> FW-1
> Date: Wed, 10 Jan 2001 12:16:07 -0500
> 
> Take a look at Nessus (www.nessus.org). It was fairly well rated in the
> Network Computing magazine for vulnerability scanners.
> 
> However, just don't depend on one tool. I just finished running a
> vulnerability scan against my exposed systems. I am like you, no budget, so
> I used Nessus, SARA, SAINT and VLAD to probe the systems. Each have their
> strengthens and weaknesses. So by using multiple tools you can take
> advantage of the strengths and lessen the impact of the weaknesses.
> 
> Ken McKinlay
>> kmckinlay@dy4.com
> 
>  > -----Original Message-----
>  > From: Allan Pratt [mailto:allan_pratt@hotmail.com]
>  > Sent: Wednesday, January 10, 2001 12:03
>  > To: fw-1-mailinglist@lists.us.checkpoint.com
>  > Subject: [FW1] Freeware/shareware scanner to do an analysis against my
>  > FW-1
>  >
>  >
>  >
>  > Hi,
>  >
>  > I am looking for a freeware/shareware scanner to do an
>  > analysis against my
>  > FW-1.
>  >
>  > Products such as ISS & Cybercop are far too expensive.
>  >
>  > Any recommendations?
>  >
>  > Thanks,
>  >
>  > Allan
>  >
>  > _________________________________________________________________
>  > Get your FREE download of MSN Explorer at http://explorer.msn.com
>  >
>  >
>  >
>  > ==============================================================
>  > ==================
>  >      To unsubscribe from this mailing list, please see the
>  > instructions at
>  >                http://www.checkpoint.com/services/mailing.html
>  > ==============================================================
>  > ==================
>  >
> 
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

-- 
------------------------------------------------------------
Thomas Reinke                            Tel:Director of Technology                   Fax:E-Soft Inc.                         http://www.e-softinc.com
Publishers of SecuritySpace     http://www.securityspace.com


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================