cis 460 – network design seminar network security scanner tool gfi languard
Post on 29-Dec-2015
223 Views
Preview:
TRANSCRIPT
CIS 460 – Network Design Seminar
Network Security Scanner Tool
GFI LANguard
12/10/2004 CIS 460 - Oscar Vazquez 2
GFI LANguard
OVERVIEW• Network Security Scanner (N.S.S.) checks
network for all potential methods that a hacker might use to attack it.
• By analyzing the operating system and the applications running on your network, identifies possible security holes.
12/10/2004 CIS 460 - Oscar Vazquez 3
Scanned Vulnerabilities
• Service pack level & security patches– Windows NT/2000/2003/XP– Microsoft Office– Microsoft Exchange Server – Microsoft SQL Server– virus updates or client software deployment
• Open shares– administrative and printer shares (C$,D$, ADMIN$) – shows you who has access to the share.
• Open ports– Port-scanning engine, allowing you to scan your network– TCP/IP and UDP
• Services – Identifies well-known services (www / FTP / telnet / SMTP... )
12/10/2004 CIS 460 - Oscar Vazquez 4
Scanned Vulnerabilities (Cont…)• Applications
– Deploy 3rd party software or patches network-wide– Update custom or non-Microsoft software– Virus updates– Checks for programs that run automatically (potential Trojans)
• Key registry entries– Security auditing policies– Start up– Log system
• Weak passwords– Maximum password age – Password history– Minimum password length
12/10/2004 CIS 460 - Oscar Vazquez 5
Basic Settings and Use
Scanned Results•Nodes by IP•HTML Report•Comparisons
12/10/2004 CIS 460 - Oscar Vazquez 7
Basic Settings and Use
12/10/2004 CIS 460 - Oscar Vazquez 8
HTML Report
12/10/2004 CIS 460 - Oscar Vazquez 9
Basic Settings and Use
12/10/2004 CIS 460 - Oscar Vazquez 10
Basic Settings and Use
12/10/2004 CIS 460 - Oscar Vazquez 11
Practical Demo
• LAB Setting– Windows 2000 is installed from scratch on the Target box– LANGUARD app. is installed on Administrator machine – Both PCs are connected to the same network segment
• Run on Target NSS Tool just after W 2000 installation– Create a Report– Applied parches– Applied security policies– Shutdown ports and services– Password settings
12/10/2004 CIS 460 - Oscar Vazquez 12
Practical Demo (Cont…)
• After complete the OS Hardening– Run NSS Tool on Target machine Again– Create a HTML report
12/10/2004 CIS 460 - Oscar Vazquez 13
Practical Demo Conclusion
• The initial operating system installed showed many vulnerabilities.
• The computer could be very easy compromised by a hacker.
• LANGuard is an excellent tool to test the security level of an entire network of computers.
• Lots of vulnerability can easily be fixed updating software applications and the operating system
• In addition to maintain the system up-to-date, is mandatory the execution of operating system hardening to customize the security level of the computer according to the level of the preferred functionality.
12/10/2004 CIS 460 - Oscar Vazquez 14
LANGuard Features review…
• Network-wide patch management• Check for unused user accounts on workstations• Audit your network for security vulnerabilities• Detect unnecessary shares, open ports & unused user
accounts on workstations• Check for and deploy missing security patches & service
packs in OS & Office.• Automatically alerts new security holes • Price $495 for 100 IPs, $995 for unlimited IPs.
12/10/2004 CIS 460 - Oscar Vazquez 15
LANGuard
Questions…??
top related