Re: How to discover FW-1 management module or GUI?

From: Penetration Testing (pentestat_private)
Date: Sat Sep 15 2001 - 20:48:18 PDT

  • Next message: Rainer Duffner: "Problems on the DOS-Prompt"

    On Tue, 11 Sep 2001, Carmelo Floridia wrote:
    
    > How can i discover in a LAN the management module or the PC that run FW-1
    > GUI?
    > best regards
    > Carmelo
    > 
    
    There have already been a lot of responses to this, so I will keep it
    short.  For what it is worth, Check Point NG GUI uses port 18190/tcp
    instead of 258/tcp.  (What ever happened to "if it ain't broke, don't fix
    it").
    
    You probably won't be able to spot a GUI client unless there was a session
    in progress.  Even this would depend on some fairly whack IP
    fingerprinting - not my field.
    
    regards,
    Dave Taylor
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Sun Sep 16 2001 - 23:10:41 PDT