Penetration Testing: Re: How to discover FW-1 management module or GUI?

From: Penetration Testing <pentest_at_infosecure.com.au>
Date: Sat, 15 Sep 2001 19:48:18 -0800 (GMT+8)

On Tue, 11 Sep 2001, Carmelo Floridia wrote:

> How can i discover in a LAN the management module or the PC that run FW-1
> GUI?
> best regards
> Carmelo
>

There have already been a lot of responses to this, so I will keep it
short. For what it is worth, Check Point NG GUI uses port 18190/tcp
instead of 258/tcp. (What ever happened to "if it ain't broke, don't fix
it").

You probably won't be able to spot a GUI client unless there was a session
in progress. Even this would depend on some fairly whack IP
fingerprinting - not my field.

regards,
Dave Taylor

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Sep 17 2001