Hardware firewall routine inspection

[Efigenio]

Hi all,

Hardware firewall is to protect the internal network security, an important barrier. Its security and stability, is directly related to the entire internal network security. Therefore, routine inspection for ensuring the security of hardware firewall is very important. Can anybody suggest me how to routine inspect the routine inspection. Thanks in advance.

[Milton.J]

Each firewall in the case of normal operation, there is a set of widgets (Daemon), such as the name of service procedures, system log procedures, network distribution program, or certification procedures. In a routine inspection must check all these procedures is run, if we find some wizard process is not running, you need to further examine what is the reason for these Wizard program is not running, what the wizard process is still running. Check and reply.

[Spyrus]

Hardware firewall logging of all communications to allow or deny the information, the hardware firewall is the main source of information on operational status. As the huge amount of data log, so check the exception log normally should be an automatic process. Of course, what kind of events are unusual events, may be determined by the administrator, only the administrator defines the unusual events and recorded, the corresponding hardware firewall will keep a log for future reference. All the best.

[Snake08]

Regularly check the system files and check system files, modify the record, it may have been found to firewall attacks. In addition, you should also emphasize that the best strategy in the hardware firewall configuration changes, include records of changes to the system files. The key changes to no more than three kinds of system files: The management has the objective of the planned modifications, such as the planned system upgrades caused by the changes; management of occasional changes to the system files; attacker document changes. Check and reply.

[Zachary]

In the security policy, you must specify the steps to modify the hardware firewall configuration, such as which authority need to change, who can make such changes, when will this be modified, how to record these changes and so on. Security policy should also specify the division of responsibilities, such as a person to do the specific changes to another person responsible for recording, the third person to examine and test the modified settings are correct. A detailed security policy should ensure that the hardware firewall configuration changes to work procedures, and to try to avoid because of changes in configuration caused by errors and security vulnerabilities. All the best.

[Steve123]

If the hardware firewall to keep log records, then check the disk usage of the hardware firewall is a very important thing. If you do not keep log records, then check the disk usage of hardware firewall becomes even more important. Keep logging cases, the abnormal growth of the disk footprint is likely to indicate problems with the log removal process, this is relatively okay to deal with. In the case of the log is not retained, if the abnormal growth of the disk footprint, then the hardware firewall may be the installation of a Rootkit tools, has been broken. All the best.