topic Re: ASA firewall penetration testing in Network Security

ASA firewall penetration testing

paulnigel — Mon, 11 Mar 2019 10:30:48 GMT

Hi forum,

Due to SOX requirements, we are supposed to perform penetration testing on the firewall to ensure it is working as accordingly. There are tons of info on the web, I am almost complete novice at this, I would appreciate if you could advise me on how should I go about doing this? I need to write a procedure to do this yearly.

Kind regards,

Re: ASA firewall penetration testing

srue — Fri, 15 Jun 2007 01:43:31 GMT

download Nessus ( http://www.nessus.org/ ) - the free version. It's one of the better scanners for it's price (free). The biggest difference between the free version and the licensed version is updates are delayed a week for the free version.

lots of good options and tests for TONS of vulnerabilities.

Re: ASA firewall penetration testing

anandramapathy — Fri, 15 Jun 2007 06:01:54 GMT

There is a GUI frontend which works well once it is configured. YOu can try that too.

It is called INPROTECT. Try that out.

Re: ASA firewall penetration testing

paulnigel — Fri, 15 Jun 2007 06:05:10 GMT

Thank you everyone for being so helpful. 😆

Thanks much,

Re: ASA firewall penetration testing

rcoleman67 — Fri, 03 Apr 2020 23:57:17 GMT

A vulnerability scan is NOT penetration testing. It's sad that professionals would comment/recommend such an action without freaking knowing the difference between vulnerability scanning and penetration testing. Vulnerability scanners are automated tools looks for specific (often known) vulnerabilities in given technologies. Penetration testing is actually performing tests to evaluation vulnerabilities found by scanners, but much more importantly perform tests to compromise systems that are most often not enumerated or disclosed with the scanners.

Re: ASA firewall penetration testing

Marvin Rhoads — Sat, 04 Apr 2020 03:54:57 GMT

@rcoleman67 this thread is 13 years old. The state of maturity in the pen testing world is a bit different now than it was in 2007.