# IT/network geeks **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [February 5, 2009, 10:46am UTC](https://forums.speedlife.net/t/it-network-geeks/62533 "2009-02-05T10:46:49Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [February 5, 2009, 10:46am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/1 "2009-02-05T10:46:49Z")
Network stuff is not my strong suit, and apparently it’s not for our IT guy either. He just stopped by asking me (a software engineer) if I knew of any good utilities for testing firewalls. :picard: So what do you guys who have to keep firewalls locked up for a living use to test your security? ---
**Author:** ![ILC](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/ilc/32/5337_2.png) [@ILC](https://forums.speedlife.net/u/ILC)\ **Post date:** [February 5, 2009, 10:48am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/2 "2009-02-05T10:48:05Z")
personal computer firewalls… or network firewalls… ---
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [February 5, 2009, 10:55am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/3 "2009-02-05T10:55:16Z")
Small business stuff, generally these: [http://www.sonicwall.com/us/products/TZ\_Series.html](http://www.sonicwall.com/us/products/TZ_Series.html) No web hosting, FTP or anything like that. Basically just keeping the office internet secure. ---
**Author:** ![Joe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/joe/32/7219_2.png) [@Joe](https://forums.speedlife.net/u/Joe)\ **Post date:** [February 5, 2009, 10:57am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/4 "2009-02-05T10:57:22Z")
post the IP on IRC and say you know there’s nudes of a random celebrity in there. you’ll know in 5 minutes if its secure. ---
**Author:** ![evane](https://avatars.discourse-cdn.com/v4/letter/e/6bbea6/32.png) [@evane](https://forums.speedlife.net/u/evane)\ **Post date:** [February 5, 2009, 11:21am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/5 "2009-02-05T11:21:25Z")
Already told him in AIM but for the rest, probably best option with respects to cost is Nessus. If you ant to test outside in egress you need to get a box on the interest that you can run Nessus from (hell run from your home network). For internal scans we use Nessus at sitel and for external we use Trustwave. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 5, 2009, 11:43am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/6 "2009-02-05T11:43:49Z")
nm Just try nessus I wouldn’t use Nessus for the only means of testing…I also wouldn’t trust a firewall to be your only network security… I am sure it does a great job of inbound…not to mention you guys use NAT…A lot of people don’t setup proper egress filtering… ---
**Author:** ![BillysRevenge](https://avatars.discourse-cdn.com/v4/letter/b/b9e5f3/32.png) [@BillysRevenge](https://forums.speedlife.net/u/BillysRevenge)\ **Post date:** [February 5, 2009, 11:49am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/7 "2009-02-05T11:49:42Z")
> [@LZ](#): > > nm > > Just try nessus > > I wouldn’t use Nessus for the only means of testing…I also wouldn’t trust a firewall to be your only network security… > > I am sure it does a great job of inbound…not to mention you guys use NAT…A lot of people don’t setup proper egress filtering… QFT Encryption, Anti-Virus, blah blah blah… ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [February 5, 2009, 5:47pm UTC](https://forums.speedlife.net/t/it-network-geeks/62533/8 "2009-02-05T17:47:07Z")
Testing enterprise firewalls I have a lot of fun tools. Just setup a full Juniper multi site network in rochester that included 20 firewalls all together. What specifically are you looking to check? Just inbound ports you can see or try to actually hack the firewall and see if it flags it? ---
**Author:** ![Daddie](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/daddie/32/7621_2.png) [@Daddie](https://forums.speedlife.net/u/Daddie)\ **Post date:** [February 6, 2009, 9:26am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/9 "2009-02-06T09:26:20Z")
How big is the business? I’d hire 3rd party. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 6, 2009, 9:27am UTC](https://forums.speedlife.net/t/it-network-geeks/62533/10 "2009-02-06T09:27:41Z")
> [@Daddie](#): > > How big is the business? > > I’d hire 3rd party. 3rd party to test a cheap sonicewall :mamoru: ---
**Author:** ![itsJim](https://avatars.discourse-cdn.com/v4/letter/i/c67d28/32.png) [@itsJim](https://forums.speedlife.net/u/itsJim)\ **Post date:** [February 7, 2009, 8:59pm UTC](https://forums.speedlife.net/t/it-network-geeks/62533/11 "2009-02-07T20:59:51Z")
sudo nmap -P0 -sS -p0-65535 -O -oN OUTPUT -sV \ Usually works pretty well for me