IPS functionality testing

usvi — Mon, 31 Oct 2011 15:06:01 GMT

We are looking to do a live demo of PAN devices to some leads . Does anybody have tool we can use to demonstrate the IPS functionality in real time .Putting the box through a wide range of attacks . App ID is pretty easy but Checkpoint now does application visibility . I have heard about metaploit . I havent seen a windows version u could easily use . Not a linux person .Looking for a free tool .

Thanks

Re: IPS functionality testing

skrall — Mon, 31 Oct 2011 16:36:04 GMT

I can not think of any tools for windows offhand but there are a few manual tests you vcan run.

1) Surf the http://eicar.org/ site and download the malware file.

2) Go to any website using HTTP and find a place that allows text and type <script>alert(XSS test)</script>

There are quite a few examples on the web. But since we are not a Web App firewall there will be some XSS attacks that the paloalto will not detect. Make sure you test your examples in the lab first before demonstrating to the customer.

Steve Krall

topic Re: IPS functionality testing in General Topics

IPS functionality testing

Re: IPS functionality testing