Home page logo
/

basics logo Security Basics mailing list archives

Re: Checkpoint smart defance as IPS
From: mzcohen2682 () aim com
Date: Thu, 27 May 2010 19:47:49 -0400


but can it decrypt the traffic?

dont forget they use ssl....

-----Original Message-----
From: Roger Gill <roger () itnetsec co nz>
To: mzcohen2682 () aim com
Sent: Thu, May 27, 2010 7:42 pm
Subject: Re: Checkpoint smart defance as IPS


What version of Checkpoint are you using? If your on NGX6.x or below then smart defense isn't a really a true IPS... However from 7.0 with the IPS software blade this is much more functional. 
 
cheers 
Roger 
 
On 28/05/2010 8:50 a.m., mzcohen2682 () aim com wrote: 
Hi list friends !!! 
 
I did a pentest for a client's web site and found many holes most of
> them because of Sql injection which can be fixed with a good practice > of input validation. I also recommended installing an IPS. the client > has checkpoint smart defance module installed on his FW but I guess > that this module is not enough because 1. one cant write signatures 2. > the clients uses SSL on his web site so the IPS cant see the attack. > AM I WRONG?? I think that the client needs to buy a real IPS which can > also open the encrypted traffic. 
 
which IPS you recommend for doing the task? 
 
 
thanks a lot, 
 
Marco 
 
 

------------------------------------------------------------------------ 

Securing Apache Web Server with thawte Digital Certificate 
In this guide we examine the importance of Apache-SSL and who needs
an > SSL certificate. We look at how SSL works, how it benefits your > company and how your customers can tell if a site is secure. You will > find out how to test, purchase, install and use a thawte Digital > Certificate on your Apache web server. Throughout, best practices for > set-up are highlighted to help you ensure efficient ongoing management
of your encryption keys and digital certificates. 
 

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
 

------------------------------------------------------------------------ 

 

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault