Re: Firewall rulebase checking tool

[Michal Merta <michal.merta () gmail com>]

Hello,

try nipper - I used this software for Netscreen and PIX audits - works
pretty well.
It used to be opensource, now it's commercial.
And looks like checkpoint is supported as well:
http://www.titania.co.uk/index.php?option=com_content&view=article&id=52&Itemid=58
Regards, Michal


On Fri, Aug 13, 2010 at 4:17 PM, Jirka Vejrazka
<jirka.vejrazka () gmail com> wrote:
> Hi all,
>
>  I'm trying to figure out if there is a tool that would help
> validating firewall rulebase(s), if the configuration is available
> (i.e. no blind pen-testing, more like an audit)
>
>  I know about Flint from Matasano security, looking for some other
> options too. Ability to recognize iptables and CheckPoint syntax would
> be great.
>
>  Any hints appreciated
>
>    Jirka
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------