How to test your firewall

[ZEBIT]

We have a Palo Alto PA500 with several security rules. It seems okay, but the CEO asked that I'm sure the company is secure.

So the question is, how can I test we are safe from the outside world?

[DaveCorwin]

If he wants a thorough test of your network security, he may want to hire a pen tester. Other than that, you could utilize the various functions on the monitor tab. Your question encompasses a rather broad tasking, so you would likely want a plan of action laying out exactly what needed tested prior to the testing. 

[ssharma]

Hi Zebit,

Other than penetration test, you can try to access the resources hosted inside and try to access them with ports or services that are not allowed. You can also test same this with outbound traffic. Other test can also include eicar test. You can access ACC tab and also threat and traffic logs to see what all services are denied or allowed and see if that is according to the policy. HTH.

[pulukas]

If you don't have a budget for external pen testing, you can setup the scanner tools and run a basic exam yourself.  Nmap and metasploit are the basic tools of the pen tester.

Nmap - Free Security Scanner For Network Exploration & Security Audits.

Penetration Testing Software | Metasploit

[Satish]

Hi Zebit,

There are so many option you can check the security parameter of yours network that is called pen testing, for pen testing so many free tool and os are available in cyber space (backtrack, Kali linux , anonymous ). in you concept scan own public ip , find open port , Try DDoc attack , target attack ....... etc

[mizhou]

You can use the Nessus to scan the resource that is protected by the firewall as well.

[_slv_]

Hi

You can use Evader – Advanced Evasion Techniques – Free Security Tool | McAfee

Slawek