AJ: Intrusion simulation

[ajarina]

I have a PIX 501 firewall. Is there a way to test wheter its intrusion detection feature really works? How can I get notified that theres a real-time intrusion happening? Any tools to simulate this task at least to prove to clients that this thing is really working?

[jmia]

Hi - Allan,

You could try using 'shields up' from www.grc.com - basically a shields up tests your external PIX interface + probes the PIX ports to see if there are any open 'holes' on your PIX - and gives you a report at the end, it's all FREE !!! - It's very very good try it and see what you think.

Hope this helps

Jay

[gmauchamer]

The best Security testing/hacking tools are the Linux based tools ex. NESSUS or NMAP. All Freeware.

You're going to need something like Cisco Secure Policy Manager to actually get a notification of an Intrusion.