Firewall testing

[Ricardo253]

Hi,

I´ve implemented a Pix 501 in my network with several rules. I´m wondering if anyone knows a way to test each rules, also if there is a tool to test throughput and perfomance of the firewall.....

thanks in advance...

[Patrick Iseli]

To test your access-list you could run a portscanner (nmap) or a Pentest tool as Nessus.

Portscanner nmap:

http://www.insecure.org/nmap/download.html

Online with Shieldup: https://www.grc.com/x/ne.dll?bh0bkyd2

http://www.grc.com/default.htm

http://www.google.ca/search?hl=en&q=online+port+scanner&btnG=Google+Search&meta=

Pentesting:

http://www.nessus.org

Performance testing:

http://www.pcpitstop.com/

http://www.dslreports.com/tweaks

http://www.google.ca/search?hl=en&q=DSL+Performance+testing+online&btnG=Search&meta=

sincerely

Patrick

[Patrick Iseli]

You can use the Test TCP utility (TTCP) to measure TCP throughput through an IP path. To use it, start the receiver on one side of the path, then start the transmitter on the other side. The transmitting side sends a specified number of TCP packets to the receiving side. At the end of the test, the two sides display the number of bytes transmitted and the time elapsed for the packets to pass from one end to the other. You can then use these figures to calculate the actual throughput on the link. For general information on TTCP, refer to Network Performance Testing with TTCP /images/exit.gif .

The TTCP utility can be effective in determining the actual bit rate of a particular WAN or modem connection. However, you can also use this feature to test the connection speed between any two devices with IP connectivity between them.

http://www.cisco.com/warp/public/471/ttcp.html

http://www.netcordia.com/tools/tools-ttcp.shtml

sincerely

Patrick

[Ricardo253]

Thanks both for the help.....