There are plenty of sites on the web to verify software firewalls.  Start here...
http://cable-dsl.home.att.net/index.htm#CheckSecurity

Carl


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Phillip Pi
Sent: Thursday, December 26, 2002 8:23 PM
To: [EMAIL PROTECTED]
Subject: RE: What's the best options to test a software firewall on
Windows?


Ah. Basically, I just wanted to test Windows 9x and NT5 for any holes and 
openings with the installed software firewalls. It is basically consumer 
and workstation machines. That's all.
-- 
"News Headline: Ants Take A Long Time To Cook In Microwave" --unknown
  /\___/\
 / /\ /\ \        Phillip Pi (Ant); The Ant Farm: http://antfarm.ma.cx
| |o   o| |
   \ _ /                E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED]
    ( )

On Thu, 26 Dec 2002, Carl Houseman wrote:

> It depends on what the firewall is supposed to be protecting and how.
> 
> Pretty much the default setup will verify that the firewall is doing its job.  
>Nessus uses several methods of trying to identify active IP addresses but if the 
>firewall hides things well and the open ports are NOT what Nessus specifically tests 
>with TCP Ping, then it may skip some testing that the firewall would permit.
> 
> Nessus' developers will tell you it's really not a tool intended for testing 
>firewall protection,  unless you checking for vulnerabilities in that particular 
>firewall!
> 
> Carl
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Phillip Pi
> Sent: Thursday, December 26, 2002 6:42 PM
> To: [EMAIL PROTECTED]
> Subject: What's the best options to test a software firewall on Windows?
> 
> 
> Hi,
> 
> Are the default settings/options and all the latest plug-ins in Nessus the 
> best setup to test a Windows software firewall? Or is there something 
> special that I need to do to really fully test the firewall?
> 
> Thank you in advance. :)




-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to