Re: Firewall Audit Programme/checklist

[tqbf () secnet com]

> Has anyone found or got an Audit Program for firewalls? or an audit
> checklist for firewalls?

We're working on one in CASL (our programming language for audit tool
construction); our scanner has a subsystem called CAPE that fires off
arbitrary TCP/IP packets a la ipsend, and it has a series of checks as
well; you can see the checklist we have in our old CAPE product at

        http://www.secnet.com/ballista/cape.html

I am actively looking for input on what good checks would be for packet
filter tests. I have a few ideas myself, if people are interested in 
discussing this.

-----------------------------------------------------------------------------
Thomas H. Ptacek                                        Secure Networks, Inc.
-----------------------------------------------------------------------------
http://www.enteract.com/~tqbf                           "mmm... sacrilicious"