Penetration Testing mailing list archives

Re: [PEN-TEST] War Dialers


From: "Teicher, Mark" <mark.teicher () NETWORKICE COM>
Date: Sun, 3 Sep 2000 07:29:18 -0700

Yes, but placing a Telewall Firewall in-line with a very busy PBX (over 8
T-1s) can cause a bottle neck.  This is an extremely bad design for large
nationwide insurance companies.  The Telewall Firewall was not successful
at the last place I was consulting at. It is not compatible with the larger
Lucent or WilTel equipment.

/m

At 02:10 PM 9/1/00 -0500, Todd Beebe wrote:
To clarify some information about the SecureLogix products for telephony
security:

TeleSweep Secure Scanner is a distributable dialer/vulnerability scanner for
remote access servers that has penetration testing capabilities.

TeleWall Firewall is a distributable appliance that connects between a PBX
and the CO and allows administrators to control voice and data traffic using
a security policy thats very similar to most policy-based ip only firewalls.
Admins can set policy that allows or terminates traffic based on source,
destination, call type, time of day, etc.  It is PBX independent.

-----Original Message-----
From: Destefano, Robert [mailto:RRD () PARA-PROTECT COM]
Sent: Friday, September 01, 2000 11:29 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] War Dialers


The older version of PhoneSweep wasn't the best in the world
although I haven't gotten around to using the newer version.
In reference to the other new product SecureLogix has.. TeleWall - From all
the tests I have personally seen, it seems to work extremely well not only
from a security standpoint but from a management standpoint as well.  It
acts as a firewall for phone systems from the PBX... It can detect
voice/fax/data
modes and lock certain numbers to only certain means of comms. (ie.. a voice
only can't have a modem unknowingly connected to it - you have to activate
it on the management console.)

my .02
Rocky


Current thread: