From: Richard Zaluski (rzaluski@ivolution.ca)
Date: Wed Jun 14 2006 - 08:57:39 EDT
We employ TrafficIQ. It is a commercial product that really pushes a
firewall and tests how well it reacts to attacks etc. Basically it Provides
stateful testing capabilities for the evaluation of packet filtering
devices. It also it has very good reporting functionality.
Here are some high points..
- Test firewalls, intrusion prevention / detection systems, routers,
switches and virtually any in-line packet filtering device.
- Design simple or complex testing scenarios which can easily be created,
saved and shared.
- Reduces business risk by testing network devices with real and accurate
traffic streams.
Check it out at www.karalon.com
Richard Zaluski
CEO and Founder
iVOLUTION Technologies Incorporated
905.309.1911 Ext 600
866.601.4678 Ext 600
www.ivolution.ca
www.ivolutionsecurity.co.uk
rzaluski@ivolution.ca
-----Original Message-----
From: Rocky [mailto:pixscreenpoint@gmail.com]
Sent: Tuesday, June 13, 2006 7:30 PM
To: pen-test@securityfocus.com
Subject: firewall auditing/testing
Hi guys,
I'm new to the list and been reading your email archives but
i have my own question how to test your firewall if its really secured.
Our IT director is really paranoid and he's not confident if our
current firewall security is really secured.
I already presented a NMAP/Nessus audit logs and i even
show to him the activity logs of our ACL that deny/drops
everything from the internet and permit only the basic applications.
Is there any other tools that can penetrate/test the firewall vulnerability?
Thanks,
rocky
----------------------------------------------------------------------------
-- This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@cenzic.com for details. ---------------------------------------------------------------------------- -- ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@cenzic.com for details. ------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:06 EDT