Penetration Testing mailing list archives

RE: Piercing IPAD


From: Frank Knobbe <frank () knobbe us>
Date: Thu, 29 Jan 2004 22:58:54 -0600

On Thu, 2004-01-29 at 22:09, Sanjay K. Patel wrote:
Product seems  like a joke. Anyone claiming 100% security cannot be
taken
seriously. I see they use Bloomberg as testimonial client. I highly
doubt
Bloomberg relies on them for any security at all.


So in other words, you have no direct experience with the box other than
reading the sales blurb. Oh well, thanks for your input.

FWIW: It turned out that the firewall in question is a WatchGuard and
not the IPAD. The IPAD is behind the WG and used for email. (The SMTP
banner of a normal IPAD didn't match with our target. Also, the MAC
address table of the compromised router gave it away ;)

Hopefully I can spend some time with that box later on. I'm curious how
that "True IP Address Expansion(tm)" works. Sounds like NAT to me. We'll
see.

Still, any real experience with that box is welcome. It doesn't seem to
appear that often on the wild...

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: