Re: [fw-wiz] Query on OS hardening

From: Volker Tanger (volker.tanger@discon.de)
Date: 02/17/03

  • Next message: Mike Scher: "Re: [fw-wiz] Allowing DNS servers to operate behind NetScreen 500"
    From: Volker Tanger <volker.tanger@discon.de>
    To: firewall-wizards@honor.icsalabs.com
    Date: Mon, 17 Feb 2003 16:57:40 +0100
    

    Greetings!

    m p wrote:
    > --- Tim Chettle <tim.chettle@orange.net> schrieb:
    >
    >>My question is as to what methods people use to manage and monitor the
    >>underlying Unix operating systems on the firewalls. SNMP doesnt seem the
    >>best thing to be running on the Firewall itself so how would people suggest
    >>that i monitore the OS

    Quite easy: SSH with distributed keys plus some simple shell scripting.
    See e.g. http://www.wyae.de/aslcheck/ for examples. Main advantage is
    that you won't need to install anything (fancy) on the system in question.

    Bye

    Volker Tanger
    IT-Security Consulting

    -- 
    discon gmbh
    Wrangelstraße 100
    D-10997 Berlin
    Telefon  (030) 6104-3307
    Telefax  (030) 6104-3461
    volker.tanger@discon.de
    http://www.discon.de/
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    


    Relevant Pages

    • Re: lighting---hacked!
      ... >> web server on your firewall. ... > You relay on your logging to monitor and alert you to this. ... explain about netbased firewalls and hostbased ...
      (comp.os.linux.security)
    • Re: Firewall for XP PC with multiple users
      ... > Volker Birk wrote: ... but I would restrict consideration to firewalls which also ... > that Win XP's firewall fails to monitor or restrict outbound traffic. ...
      (comp.security.firewalls)
    • Re: Firewall for XP PC with multiple users
      ... Volker Birk wrote: ... > Yes, the Windows-Firewall does, which is part of Windows XP. ... but I would restrict consideration to firewalls which also ... that Win XP's firewall fails to monitor or restrict outbound traffic. ...
      (comp.security.firewalls)
    • [fw-wiz] Query on OS hardening
      ... Checkpoint 4.1 approx 10 ... I am at present creating a hardened Build for Solaris 8 to use when i deploy ... My question is as to what methods people use to manage and monitor the ... underlying Unix operating systems on the firewalls. ...
      (Firewall-Wizards)