
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 158
192.168.16.99
192.168.20.0
NetBrute Nil Yes
192.168.16.99
Norton3_IDS
Share
Scanner
Nil Yes
192.168.16.99
192.168.20.0
Share
Scanner
Nil Yes
192.168.16.99
Norton3_IDS
Sub_Net Nil Yes
192.168.16.99
192.168.20.0
Sub_Net Nil Yes
Rulebaseassessment
InInternal_Admin,createasharethatallowseveryoneaccess.From
Internal_Clients,attempttoaccesssuchshare.
Attemptfailed.Thisisthedesirableresult.
InInternal_Dev,createasharethatallowseveryoneaccess.From
Internal_Clients,attempttoaccesssuchshare.
Attemptfailed.Thisisthedesirableresult.
Otherassessmentmethods
Fromaprotectedhost,connecttoaninternetsitethatoffersJavaandActiveX
codes,andtrytohavethemdownloaded.
Downloadsblockedandlogged.
Remarks
ItseemsliketheNortonFirewallsareprovidingexcellentprotection.Infact,itis
theIntruderAutoBlockfunctionthatallowsthefirewalltorejectallsubsequent
connectionattemptscomingfromtheblockedintruders.
Thisfeaturemaynotworkwellwhenattacksare
initiatedwithrandomsourceIPaddresses.Therefore,
furthertestingusingatoolcapableofrandom
spoofingisrecommended.
Comentários a estes Manuais