Re: Firewall Testing Software

From: Volker Tanger (volker.tanger@discon.de)
Date: 04/10/03

  • Next message: Indian Tiger: "Proof of Concept Tool on Web Application Security" 
    Date: Thu, 10 Apr 2003 09:30:33 +0200
From: "Volker Tanger" <volker.tanger@discon.de>
To: pen-test@securityfocus.com

    Greetings!

    On 9 Apr 2003 22:07:23 -0000 Colin Greg <colingreg71@yahoo.com> wrote:

    > Can anyone recommend good products for testing firewall rulesets?

    A firewall ruleset has to meet business requirements. No rule is to be
    allowed that is not covered by a signed request from someone in charge
    (CEx). Checking that is not possible with tools, so it's logical there
    is nothing to be found.

    For documenting a FWs ruleset for comparison see e.g.
    http://www.wyae.de/software/ (FW1Rules for CheckPoint, ASLRules for
    Astaro)

    Bye

    Volker Tanger

    IT-Security
    discon gmbh
    DeTeWe AG & Co. KG

    Fon +49 30 6104-3307
    Fax +49 30 6104-3435
    http://www.detewe.de/ 

    -- 
-------------------------------------------------------------------
Besuchen Sie unsere neuen Internet-Seiten http://www.detewe.de .
Neues Highlight: Wunschproduktberater fuer den Home & Office-Bereich.
Visit our new Internet Pages on http://www.detewe.de .
Our Highlight: Online Product Adviser for Home & Office.
(Currently available in German only)
--------------------------------------------------------------
Costs are climbing and complaints are rising
as SPAM overloads your e-mail servers and Inboxes
SurfControl E-mail Filter puts the brakes on spam & viruses
and gives you the reports to prove it.
http://www.securityfocus.com/SurfControl-pen-test2
Download a free trial and see just
what's going in and out of your organization. 
--------------------------------------------------------------
  • Next message: Indian Tiger: "Proof of Concept Tool on Web Application Security"