Interesting Links

[BarryStiefel]

Interesting Links



Resources (Security and Check Point-related)

• Atstake Advisories: http://www.atstake.com/research/advisories/index.html
• CERT Advisories: http://www.cert.org/advisories/
• Check Point's Knowledge Base: http://support.checkpoint.com/
• Check Point's News Server: news://nntp.checkpoint.com
• Common Vulnerabilities and Exposures Database: http://cve.mitre.org/
• DNS Resource Directory: http://www.dns.net/dnsrd/
• FireWall-1 FAQ/Whitepaper pages:
  • Attack Prevention -- IPSO/FireWall-1 articles: http://attackprevention.com/ap/library/
  • Check Point FAQ: http://www.checkpointfaq.com
  • Clico eSupport White Papers on FireWall-1: http://www.clico.pl/html/esupport.html
  • Digital Migrations: http://www.digitalmigrations.com (Nokia IPSO/FireWall-1 Specific)
  • FireWall-1 tips and tricks: http://is-it-true.org/fw/fwtips4.shtml
  • fixmyfirewall: http://fixmyfirewall.com/
  • Rowton Consulting articles on Nokia: http://www.rowtonconsulting.com/Articles.htm
  • Turkish VPN-1/FireWall-1/Nokia docs: http://support.intellect.com.tr
  • VPN-1/FireWall-1 in Deutsch (German): http://www.vpn-1.de/
  • VPN docs between Cisco and VPN-1: http://www.thenall.com/vpn/index.htm
  • Some VPN Interoperabiliy: http://www.fw-1.de/aerasec/4x/vpn-cp-x.html
• Firewall Wizards Mailing List: http://honor.trusecure.com/mailman/listinfo/firewall-wizards (not specific to FireWall-1)
• FireWall-1 Mailing List (operated by Check Point): http://www.checkpoint.com/services/mailing.html (searchable indexes at http://msgs.securepoint.com/fw1/)
• FireWall-1 Gurus Mailing List (operated by PhoneBoy): http://www.phoneboy.com/gurus
• Firewalls Mailing list: http://www.isc.org/services/public/lists/firewalls.html (not specific to FireWall?-1)
• ginspect: http://www.decock.org/ginspect/ (A webpage that helps you generate INSPECT code)
• Internet Firewalls FAQ: http://www.ranum.com/pubs/fwfaq/
• Internet Security Servers Security Center: http://xforce.iss.net
• Lance Spitzner s Publications: http://www.spitzner.net/ (contains various topics, including using snoop, configuring your NICs, hardening Solaris, and stuff on Honeypots)
• NTBugtraq: http://www.ntbugtraq.com/ (Windows Security site)
• ntsecurity.nu: http://www.ntsecurity.nu/ (Windowshttp://support.intellect.com.tr NT and 2000 Security site)
• SANS Institute: http://www.sans.org/ (security education, research, and training)

Software



(See also the Third Party Log Analysis FAQ page.

• Analyzer: http://netgroup-serv.polito.it/analyzer/ (a public-domain protocol analyzer for Windows 95/ 98/NT)
• Check Point Tools: http://www.wyae.de/software/
• cron: http://www.kalab.com/freeware/cron/cron.htm (a Windows port of the UNIX utility)
• GNU Utilities for Win32: http://www.weihenstephan.de/~syring/win32/UnxUtils.html (ports of various GNU utilities for Win32 that run natively without an emulation layer; covers tar, gzip, and md5sum)
• Microsoft Windows Services for Unix: http://www.microsoft.com/windows/sfu/ (Provides Windows versions of various Unix utilities as well as POSIX libraries)
• MinGW: http://www.mingw.org/ (minimalist GNU for Windows, which provides a gcc that produces Windows-native binaries)
• Nessus: http://www.nessus.org/ (an open-source security scanner)
• Netcat: http://www.atstake.com/research/tools/network_utilities/ (the TCP/IP Swiss Army Knife)
• NMAP: http://www.insecure.org/nmap/ (the Network Mapper)
• Osiris: http://osiris.shmoo.com/ (a tripwire-like program for Windows NT)
• Perl for Windows: http://aspn.activestate.com/ASPN/Downloads/ActivePerl/index/
• SniffIt: http://reptile.rug.ac.be/~coder/sniffit/sniffit.html (a packet sniffer for LINUX, SunOS, Solaris, FreeBSD and IRIX)
• SKey generators:
  • Archive of OTP clients: http://www.tifosi.com/OTP/
  • Opie: http://www.inner.net/pub/opie/ (One-Time Passwords in Everything)
  • otpgen: http://www.phoneboy.com/attachments/otpgen.zip
• The Laughing Bit: http://www.tlb.ch/ (some useful FireWall-1 scripts and programs)
• Zebra: http://www.zebra.org/ (a multipurpose routing daemon available under the GNU license, also available on Secure Platform NG AI)

Companies

• OPSWAT: http://www.opswat.com (Check Point OPSEC Dev , Secure Client Protection)
• Tufin Technologies (OPSEC consulting, Check Point solutions, software development): http://www.tufin.com

-- PhoneBoy - 15 Apr 2004