security audit

[freeside]

there are many website out there that help with setting
up a secure computing environment, like grc ...
there's software that helps with assessing vulnerabilities, like the metasploit framework.
-
now i think it would be cool if untangle had a rack with a button "test me"
and if would scan the current setup (firewall, routing, etc.) and deliver a report.
just to catch the most basic "misconfigurations"?
thanks.

[dwasserman]

You can do the "test me" clicking in the buttom of the site from a pc behind Untangle.

[mrunkel]

I like this idea. The question is, would you pay for such a service?

[johndball]

I would pay for it as long as it wasn't expensive and not bundled with other apps.

[sky-knight]

The problem is a proper security audit isn't something you can simply automate. Port scans only reveal so much, and a true penetration test might just knock things offline.

[YeOldeStonecat]

IMO better to offload this to a "neutral" site, instead of some services that just bog down your own firewall. Plus..neutral sites are more believable, if you use a firewall vendors own test, it will always be suspect of bias.

[freeside]

indeed, a good way to test you untangle setup is to have another
machine infront of untangle (were the line to the internet would go)
and hammer away at it with something like metasploit.
-
this is not what i was proposing. more along the line that if a newbie
(and everybody was that once) sets up untangle and then happily
goes to the shadier parts of the internet believing s/he is now safe, but
acctually is not.
so something inside untangle that can catch the most basic
(accidental) mis-configurations and throw up a warning. that's all.
-
like the new cars that go "ding ding", if you open the car door but forgot
to remove the key from ignition.
or: "ding ding" if you turn off the car but have forgot to turn off the
headlights.
or: "ding ding" if you drive 200 meters but still haven't put on
your seat-belt.

[dwasserman]

I understand, you like a "ding ding" in untangle box :x

[freeside]

no, not "ding-ding" but a red flag.