Penetration Testing mailing list archives
Re: Clueless firewall configuration ?
From: John Kinsella <jlk () thrashyour com>
Date: Fri, 11 Aug 2006 08:21:07 -0700
On Fri, Aug 11, 2006 at 07:15:00PM -0600, Tim wrote:
One question I would ask is, "How does the switch respond if the firewall pukes?" This is the device you are talking about right? http://www.cisco.com/en/US/products/hw/switches/ps708/module_installation_and_configuration_guides_chapter09186a0080159caf.html
Yeah, that's the FWSM. Each vlan shows up as a virtual interface and packets get routed between them through the FWSM, so if it goes down packets stop. They've been architected though, so they can be configured to have no single point of failure. Since he has a pair I'm presuming that they've been correctly configured in this manner, at lest to failover between units, if not with two fwsms in each chasis (I'm 95% sure you can go active/standby in a single chassis but would have to verify). John ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request () cenzic com for details. ------------------------------------------------------------------------------
Current thread:
- Clueless firewall configuration ? cableguy clueless (Aug 11)
- Re: Clueless firewall configuration ? Tim (Aug 11)
- Re: Clueless firewall configuration ? John Kinsella (Aug 12)
- Re: Clueless firewall configuration ? Chris Byrd (Aug 12)
- Re: Clueless firewall configuration ? John Kinsella (Aug 13)
- Re: Clueless firewall configuration ? John Kinsella (Aug 12)
- Re: Clueless firewall configuration ? PC (Aug 12)
- Re: Clueless firewall configuration ? okrehel (Aug 15)
- RE: Clueless firewall configuration ? Ng, Kenneth (US) (Aug 15)
- RE: Clueless firewall configuration ? Smith, Michael J. (Aug 16)
- RE: Clueless firewall configuration ? Ng, Kenneth (US) (Aug 18)
- RE: Clueless firewall configuration ? Smith, Michael J. (Aug 16)
- <Possible follow-ups>
- RE: Clueless firewall configuration ? Shenk, Jerry A (Aug 11)
- Re: Clueless firewall configuration ? s-williams (Aug 12)
(Thread continues...)
- Re: Clueless firewall configuration ? Tim (Aug 11)