I know everyone is getting sick of reading SATAN-related
info. on this list, but I'm compelled to add my 2 cents.
SATAN will be a useful tool for admins as well as unauthorized
intruders. Even if SATAN, ISS and PINGWARE(tm) cannot penetrate
a firewall, these tools are very useful when unauthorized access is gained
via other access points (e.g., dial-up, X.25, etc.). Once an intruder
has access to a system and the internal TCP/IP network, the intruder
will use these tools to find vulnerable systems (i've seen this
many times during investigations and evidence analysis). Don't
focus all your security expertise/efforts/budget on one access point.
Internal partitioning/firewalls is/are very important!
David
PINGWARE is a trademark of Bellcore.
--------------------------------------
David M. Slade (co-author of PINGWARE)
Bellcore
Voice: 908-758-5111
FAX: 908-758-4505
E-mail: slade @
cc .
bellcore .
com
|
|