Re: [fw-wiz] Netscreen firewalls

["Jon Sabo" <jonathan.sabo@gmail.com>]

Mike,

I doubt you're going to find much of a downside.  While working for one of the larger MSSP's we deployed lots of the different firewalls for hundreds of different companies.  As a result Netscreens are my favorite firewall, especially the ISG's.  They're sick.  Pix's are cool too but for any kind of deep packet inspection (and not a proxy) you have to go to with Netscreens or checkpoints...  and Netscreens support doesn't suck and the configuration is a text file.  ISG's with IDP modules allow you to send certain traffic to the IDP for analysis per rule!  The only thing I think is kind of nuts is that you can factory reset a Netscreen by logging in with the serial number as the user name and password.  This is an idp hack but... its still really cool.... albeit old.

http://web.archive.org/web/20040528165427/hack3rs.org/~nahual/netscreen.html

Ez.

Jonathan Sabo

On 12/15/06, Mike LeBlanc <mlinfosec@comcast.net> wrote:

All,
I'm looking for guidance on vulnerabilities/downsides to the Netscreen
firewalls.  I am
not looking to start a flamefest on Netscreen but simply am looking for the
downside.
We currently are a cisco pix shop and have monitoring and change management
built
around cisco.  I have done a google on Netscreen vulnerabilities and issues
but
didn't find much current data.  Any information is appreciated in advance,
including
links to current data.  Additionally if you have personal expereince,
positive or
negative, with Netscreen I would like to hear it.. off list if so desired.

Thanks in advance for any information you can provide,

Mike LeBlanc, CISSP
VP/Infosec officer for multinational bank

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards