Check point eng allowing Nmap NULL access

From: ozzie ozzie (ozkan_azizat_private)
Date: Tue Jul 15 2003 - 09:00:57 PDT

  • Next message: Domingos Costa: "Vuln scan tool for web"

    
     ('binary' encoding is not supported, stored as-is)
    hi all,
    
    I have just installed a GTA robox firewall, which uses the check point 
    engine as far as I know. I have tested it with nmap and the only access 
    that seems to get through is an nmap scan using no ping and null flags. 
    
    does anyone one know how to prevent this? (I have a rule that says all -> 
    all, any protocol deny so should it be getting through?)
    
    Thanks in advance
    
    oz
    
    ---------------------------------------------------------------------------
    Your network Firewall and IDS products do not prevent Web application
    exploits - the most common form of online attack - resulting in Web
    defacement, data theft, sabotage and fraud.
    
    KaVaDo is the first and only company that provides a complete and an
    integrated suite of Web application security products, allowing you to
    assess your entire environment, automatically set positive security
    policies and maintainĀ it without compromising business performance.
    
    For more information on KaVaDo and to download a FREE white paper on Web
    applications - security policy automation, please visit:
    http://www.kavado.com/ad.htm
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Tue Jul 15 2003 - 09:26:50 PDT