Re: Auditing Router and Firewall - Checklist and Utils

["Sheldon Malm" <smalm () ncircle com>]

If you're looking for a commercial tool, you can check out our (nCircle's) CCM product.  Our tool includes policies for 
the CIS certified benchmark for PIX and it's agentless.

Not a pitch, just an option.  :)

--------------------------
Sheldon Malm
Director 
Security Research and Development
nCircle VERT

Sent from my BlackBerry Wireless Handheld


----- Original Message -----
From: listbounce () securityfocus com <listbounce () securityfocus com>
To: security-basics () securityfocus com <security-basics () securityfocus com>
Sent: Wed Oct 03 09:47:15 2007
Subject: Re: Auditing Router and Firewall - Checklist and Utils

Hi Vishal,

For the checklist part you can contact
http://iase.disa.mil/stigs/checklist/index.html.

It is quite comprehensive and well organized.

Regards,
Durga Prasad.


On 3 Oct 2007 02:35:34 -0000, visitnikhil () gmail com
<visitnikhil () gmail com> wrote:
> Hello Wali,
>
>
> There is a tool called "Router Auditing Tool (RAT)"available from CIS Security.
>
>
> This tool has the capacity to audit and score (based on a pre-configured/pre-defined benchmark) Cisco IOS routers and 
> Cisco PIX firewalls.
>
>
> More Information on CIS RAT Tool:
>
>
> http://www.cisecurity.org/bench_cisco.html
>
>
> ---
>
> Nikhil Wagholikar
>
> Information Security Analyst
>
> NII Consulting
>
> Web: http://www.niiconsulting.com