RE: Firewall rulebase audit

["Palmer, Mark" <mpalmer () hoovers com>]

Take a look at Nipper:
http://sourceforge.net/project/showfiles.php?group_id=191582&package_id=
226095  

Mark Palmer
  

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of David Hamm
Sent: Thursday, September 20, 2007 9:22 AM
To: security-basics () securityfocus com
Subject: Re: Firewall rulebase audit

You might want to look at this Excel template, it can be helpful for 
keeping track of PIX configs.
http://downloads.techrepublic.com.com/download.aspx?&scname=Firewalls&do
cid=277863

There is an article to go along with it, and several other PIX related 
checklists etc. on the site.


Murda Mcloud wrote:
> Hey this is a good start point-from Lance Spitzner no less...
> http://www.rootprompt.org/article.php3?article=323
>
> -----Original Message-----
> From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com] On
> Behalf Of jctx09 () yahoo com
> Sent: Thursday, September 20, 2007 7:00 AM
> To: security-basics () securityfocus com
> Subject: Firewall rulebase audit
>
> I have a pair of PIX firewalls that I need to audit. I was hoping to
get
> some guidelines for doing this. Antyhing specific to PIX would be even
> better.
>
>
> 1) What is the best/easiest way to document a current policy?
Spreadsheet??
> I would like to know what ports (services) are open and to where? Also
> duplicates, etc.? Would it be best just to put it in a spreadsheet? Is
there
> a tool for this?
>
>
> 2)Is there standard Analysis checklist to go by when reviewing a (PIX)
> firewall policy?
>
>
> Any help is highly appreciated.
>
>
> Thank you,
>
>