Thanks. So here is the problem. The "audit" part is done by retrieving logs, monitors, and reports security policy events.

I am looking for a tool that you put your config into and it would look for problems based upon best security practices. I.e. line 1 permit ip any any and then line 2 permit tcp host x. eq www or whatever being more specific. Or going through the VPN section and saying VPN # x is using policy DES MD5 with no PFS, it's recommended to do x. You see what I'm saying?

Thanks. Take care and God bless.

How about "Output Interpreter".

https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl

Does this help.

Regards,

Arul

Hi Justin,

Try using Nipper,its awesome.Nipper processes network device configuration files, performs a security audit and outputs a security report with recommendations and a configuration report. Nipper currently supports Cisco IOS, PIX, ASA, FWSM, NMP, CatOS and Juniper NetScreen devices

You can download it from -

http://sourceforge.net/projects/nipper

You can go through the quick start guide to know about its usage.Let me know if it helps.

Plz rate this post.

cheers

sachin verma

Thanks Sachin. I had downloaded this, but hadn't tried it out. I'm trying the algosec tool out also since they support Checkpoint platforms too. We'll see. Nipper does a really good job of giving the quick and dirty in a few nice formats. Thanks again. Take care and God bless.