Re: External Pen-testing

["Smith, C. Aaron" <asmith () URSINUS EDU>]

Only used such a company once, at a previous school I worked at.  We used it as part of an evaluation of an IPS we were 
considering purchasing.  Once without the IPS in place, trusting the firewall/ACLs and then with the IPS inline.

Hope that helps.

Aaron Smith
Network Engineer
Ursinus College

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Don 
Nightingale
Sent: Thursday, October 27, 2011 3:16 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] External Pen-testing

Hi folks.  We have some auditing recommendations, and want to get an 
idea of what other institutions are doing.

To what extent have any of you engaged outside companies to perform 
penetration testing?



--
Don Nightingale
Network Engineer
Wellesley College