Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

2
votes
2answers
393 views

What compliance framework is appropriate for firewalls

As a more corpose vulnerability assessment and penetration test, one step of our activity is to review from a security perspective the policy of some firewall. In our society we have a deep ...
3
votes
2answers
9k views

Disabling windows firewall remotely

i use metasploit for pentesting windows 2003 sp2 server but when windows firewall is on i am not able to perform pentest successfully is there any way to disable firewall remotly?
18
votes
5answers
3k views

To firewall or not to firewall?

There's recently been some discussion (to be generous) about the pros and cons of having a firewall deployed in front of servers. The con mainly being that it's a point of failure in case of a DDoS. ...
7
votes
4answers
3k views

Security Services on Edge Router vs. Standard Firewall

If I can run a site to site VPN, NAT & Reflexive ACLs on a edge router (plus normal routing functions), what would be the use of running a stock firewall behind it? For instance, Core Switch --> ...
10
votes
5answers
1k views

What firewall settings on a Macintosh are the most restrictive, while still permitting casual internet use?

I don't want this to be subjective, so I'll try to make the requirements as clear as possible. On a Mac with Snow Leopard, how can I set up the firewall rulesets that allow ONLY: Using the internet ...
3
votes
1answer
1k views

I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?

(Is this too application specific? It seems like a reasonable question that would be useful to other people...) So, I've got this ASA in front of a network that I didn't set up. It's been ...
33
votes
7answers
34k views

Why do people tell me not to use VLANs for security?

I have a network, where a have a couple of VLANS. There is a firewall between the 2 VLANs. I am using HP Procurve switches and have made sure that switch-to-switch links accept tagged frames only and ...
4
votes
2answers
1k views

Cisco ASA Security Contexts: Any Real World Installs?

We are looking at deploying a Cisco ASA 5520-I am looking at the security contexts feature, and was wondering if anyone has deployed their ASA in this way, and how it is working out for them. Have ...
8
votes
2answers
354 views

What is secure enough for web applications?

we intend to build a network in a small health center with No Internet Access it is expected to have 30 terminal machines, all machines will use an electronic medical record web application we want ...
26
votes
7answers
6k views

Port Knocking is it a good idea?

Normally for a server I like to lock down SSH and other non-public service to only be accessible by certain IP addresses. However this is not always practical if the business doesn’t have static IP ...
9
votes
4answers
1k views

A firewall without any extra features [closed]

I have Kaspersky Internet Security (KIS) installed on my system. I always keep it disabled, yet using a few practices, I kept my system virus free for years: I disabled autorun using these tricks; I ...
0
votes
1answer
521 views

JUNIPER Junos Pulse - how to apply policy to device

We'd like to set up and use Juniper Junos Pulse on iphone and ipad for access to Corporate mail. We have juniper SA and have prepared the policy, but how do we apply the policy to the devices?
8
votes
2answers
244 views

Retaining institutional knowledge of a complex infrastructure (checkpoint, juniper, etc)

In the next month my functions will be expanded to include IT security (firewalls, VPN, PKI) in a big complex infrastructure. Can I ask you for advice on how-to be well prepared for it? What sorts of ...
6
votes
4answers
1k views

How can a company reduce exposure to packet spoofing? What solution should exist, but doesn't?

I'd like to understand what anti-packet-spoofing technology exists (or should exist) to verify an inbound packet. Maybe this is as simple as a Cisco ACL, Firewall Rule, implemented at the network ...
4
votes
2answers
343 views

What criteria do you use for evaluating Client-Side / Endpoint security products?

What features are important to you in client-side AV and Firewall products? Who benefits from these features? Managment, the end user, helpdesk. Are there features that are being 'sold' by the ...
7
votes
3answers
332 views

What tools are available for distributing and syncing firewall rule-sets to multiple devices?

I am looking for a solution to be able to distribute and sync firewall rule-sets to multiple devices. There are a few solutions out there such as Playbook by Matasano but it comes with an expensive ...
11
votes
7answers
3k views

Egress filtering on an office network?

With an office network most companies will use ingress filtering to add a level of security, however few take advantage of egress filtering to protect their networks. The use of egress filtering will ...
12
votes
5answers
277 views

What are the areas to focus on to protect users and devices?

What are the areas or technologies to focus on to protect users and devices? Are patching, antivirus and firewalls still the main areas? How do you defend against attacks against vulnerabilities ...
16
votes
1answer
3k views

What is a Web Application Firewall?

What is a Web Application Firewall (WAF) and what are some of the things to look for in an effective one? Why would you deploy a WAF instead of just an IPS?
50
votes
6answers
18k views

What techniques do advanced firewalls use to protect againt DoS/DDoS?

It is hard to protect a server against Denial of Service attacks, DoS/DDoS. The two simple ways I can think of is to use a server with much resources (e.g. CPU and memory), and to build the server ...