Low-level network assessment: firewalls

摘要

A common question in the computer security media these days is how to perform a more advanced network assessment, particularly with regards to firewall assessments. Most people who ask are familiar with the running of automated assessment tools, be it one of the many vulnerability scanners, the often cited Nmap (see www.insecure.org) or similar enumeration tools. These same people are aware that although these tools will run certain checks against firewalls, running only these tools will not even approach a full security review of the firewall.