Security check on firewall and workstations behind the firewall

From: Fernando Ronci (fernandoronci_at_hotmail.com)
Date: 01/22/04 

Date: 21 Jan 2004 20:29:34 -0800

Hi,

What procedures should be carried out to thoroughly check security on
a network comprised of one Windows 2000 Server running the CHX-I
packet filter from http://www.idrci.net (and also configured to do
NAT and share an internet connection) and several Windows 2000
Professional workstations ?
It's two things that I have to analyze:
1) Security on the server itself, and
2) (In)accessibility to internal workstations from the public
Internet. E-mail and web surfing are the only Internet services -so to
say- they are allowed to do.

I would like to know what is the standard procedure to carry out such
checks, I mean, what tests should be done and what software tools
(from Microsoft or third parties) for security analysis/audit should
be used.
As an additional note, the operating system on the server and
workstations is automatically updated and Norton Antivirus (retail
version on the workstations and Corporate Edition on the server) is
installed.

Thank you.

Fernando Ronci
E-mail: fernandoronci@hotmail.com

Relevant Pages

  • << SBS news of the week 12/6/2004>>
    ... Simply connecting to the Internet — and doing ... You would NEVER set up a server with file and printing sharing ports ... McAfee says 'Skulls' mobile security threat still low ... ISPs raise the stakes on DDoS attacks ...
    (microsoft.public.backoffice.smallbiz)
  • << SBS news of the week 12/6/2004>>
    ... Simply connecting to the Internet — and doing ... You would NEVER set up a server with file and printing sharing ports ... McAfee says 'Skulls' mobile security threat still low ... ISPs raise the stakes on DDoS attacks ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS news of the week 12/6/2004>>
    ... Simply connecting to the Internet — and doing ... You would NEVER set up a server with file and printing sharing ports ... McAfee says 'Skulls' mobile security threat still low ... ISPs raise the stakes on DDoS attacks ...
    (microsoft.public.windows.server.sbs)
  • Re: AD Design Question
    ... "Jon" wrote in message ... What is the security ... If you have a publicly accessible machine such as an ISA Server that you may ... be using as the access point to your network from the public Internet. ...
    (microsoft.public.windows.server.active_directory)
  • Re: No DNS
    ... "The Internet Assigned Numbers Authority has reserved private IP ... The workstations assigned themselves an address when DHCP failed. ... I enabled dhcp and dns on the server and insured my scope was ...
    (microsoft.public.windows.server.sbs)