At 11:08 AM 11/4/97 -0500, Brad wrote:
>Check out Wheelgroup's NetRanger Intrusion Detection product and upcoming
NetSonar vulnerability scanner.
>Handles hijacking and much more, also works at fast ethernet and fddi speeds.
>
>Wrath
Perhaps I'm missing something. Why would Wheelgroup's NetRanger product be
able
to stop session hijacking? Any hacker who is worth their salt will be able
to
roll their own custom packets to be exactly what the firewall would expect
the
packets to be (including source/destination info, sequence numbers, etc.)
The
only defense against session hijacking that I'm aware of is to encrypt from
point-to-point.
Best Regards,
Frank
The opinions of the author of this mail may not necessarily be
representative of the opinions of Fortifed Networks, Inc.
Fortified Networks, Inc. - http://www.fortified.com/
Expert (vendor-neutral) Computer and Network Security Consulting
Phone: (317) 573-0800 Fax: (317) 573-0817
Follow-Ups:
References:
|
|
