
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 174
Outside
FW1_B2C
Sub_Net Nil Yes
Outside
192.168.7.0
(published
addresses)
Sub_Net Nil Yes
Rulebaseassessment
InitiateconnectionstowardstheEcommercewebserviceserverviaprotocols
OTHERTHANHTTPandSSL.
Connectionsfailed.Thisisthedesirableresult.
InitiateconnectionstowardstheexternalEmailserviceserverviaprotocols
OTHERTHANSMTP.
Connectionsfailed.Thisisthedesirableresult.
InitiateconnectionstowardstheexternalDNSserviceserverviaprotocols
OTHERTHANDNSQuery.
Connectionsfailed.Thisisthedesirableresult.
StressTesting
*Beforeproceeding,explicitapprovalmustbeobtained,andadvancednoticemustbegiven.Thesetestsshouldbeconductedonlyduring
nonpeakhours.
WebServerStressTool andUDPFlood– weusethesetoolstostresstestthe
firewall.Thegoalistodetermineifheavytrafficcanbreakthefirewallin
between,orif thefirewallwillbecomeabottleneck.Tosimulateahighnumber
ofsimultaneoususers,weneedtheenterpriseeditionoftheWeb StressTool
(whichposesnouserrestriction).Theidealsettingistosetthenumberofusers
toatleast1000. Formaximumperformance,runthesetestsfrommultiple
machinestosharetheload.
Thefirewallransmoothlywithouttrouble.Beloware
theresults:
Firstrun:
Kommentare zu diesen Handbüchern