Security auditing of network infrastructure

[marti () VIDEOTRON CA (Martin M Samson)]

Good day to all,

We are currently in the process of auditing the vulnerability of
our network. We are using tools like ESS Internet Scanner and so
on, but do you know of recent written procedures for auditing
network infrastructure? We've looked at some stuff from the US
navy, but it was obsolete.

We are doing an indepth auditing from each and every server,
applications (of the shelf and "home made") on those servers,
routers, firewall etc. We have the expertise on site (network
managers, developpers etc.) but no security specialist. I don't
want to rely only on network specialist, there must be some
references we could use as a lead...

Thanks for your input!

Mart!

PS: By the way I would like to thank all those that gave their
opinion on my previous posting about "Raptor", it was greatly
appreciated.