Firewall vulnerability Testing

[echelon360]

Hi guys,

A firewall vulnerability test on the PIX is schedule for and i was wondering if anyone has some advice on this.Basically,some of the qtns i have

-I'm assuming a collection of software is needed to test the firewall (eg SAINT).Is there a list of other effective ones?

-What kinds of test should i be conducting (eg port scans,vulnerable services)

-Is there a site/resource that could provide aid in coming up with a Firewall test doc.

Appreciate any help provided ...thank you

[Patrick Iseli · Accepted solution]

Firewall Audit !

Use nessus istead of Saint. Saint is quiet old and not updated. http://www.nessus.org

Services to check are:

- IPSec

- ssh

- telnet

- snmp

- https

- http

- icmp

Perform a general portscan with "nmap" to map open ports (-sS -P0). Then start a vulnerability scanner.

Doc about that can be found on:

http://www.google.ca/search?hl=en&q=firewall+piercing&btnG=Google+Search&meta=

http://www.sans.org/rr

sincerely

Patrick

[mtawafig]

nessus can help