GFI ESM GFI ESM

EventID.Net Firewalls page



This page intends to be a compilation of our experience in installing and managing firewalls, an easy way to access some of the information that we compiled over time and a portal for other resources as well.

Products:
FireGen for SEF/Raptor - Log Analyzer for SEF/Raptor firewalls
FireGen for PIX - Log Analyzer for Pix firewalls
FireGen for Netscreen - Log Analyzer for Netscreen firewalls
FireGen New Generation - Log Analyzer for SEF 8.0, SGS, Linksys, SonicWALL and Fortigate firewalls - Beta

Let us know for what type of firewall you would like us to develop a log analyzer!

IT Security News

Acquisitions, Social Networking and Other Security News From the Week
5 Sep 2010 at 11:25am
A recap of a week of IT security news that included talk of acquisitions by CA Technologies and 3M as well as security moves by Facebook and Twitter. - Acquisitions, social network security and ...

Google Pays $8.5M to Settle Buzz Privacy Lawsuit
5 Sep 2010 at 7:05am
Google will pay $8.5 million to settle a class-action lawsuit that argued its Google Buzz social Web service violated users' privacy when it launched in February. - Google will shell out $8.5 mi...

Google Privacy Policy Update Targets Simplicity
4 Sep 2010 at 8:22pm
Google is updating its privacy policy to make it "more transparent and understandable." The changes will go into effect next month. - Google is reworking its privacy policy in the name of simpli...

Internet Scammer Gets Nearly 13 Years for $1.3M Fraud
3 Sep 2010 at 4:10pm
A Nigerian man gets sentenced to 151 months in prison for a scam that stole $1.3 million from victims. - Okpako Diamreyan, a Nigerian citizen, was sentenced Sept. 1 to nearly 13 years in prison ...

College Data Breaches Underscore Security Challenges
3 Sep 2010 at 1:08pm
Security pros are talking about the challenges educational institutions face when it comes to protecting user data. - The University of Virginia reportedly fell victim to a cyber-attack the week...

Apple Ping Hit by Spammers
3 Sep 2010 at 11:58am
Researchers at Sophos say Apple Ping has been hit by scams familiar to users of other social networks such as Facebook and Twitter. - Spammers jumped out the gate quickly with survey scams aimed...

Microsoft Releases Application Security Tool Kit for Developers
2 Sep 2010 at 7:33pm
Microsoft updates its EMET tool kit, designed to help developers thwart attacks against their applications. - Microsoft released an updated version of a tool kit Sept. 2 to help developers make...

Facebook Adds Remote Logout Security Feature
2 Sep 2010 at 5:01pm
Facebook is rolling out a security control that enables users to remotely log out of an active session from a different machine. The feature extends controls added in May to prevent unauthorized ac...

Check Point Pushes Virtual Security for VMware Environments
2 Sep 2010 at 12:30pm
Check Point Software Technologies added to its virtual security lineup with new integration with VMware technology. - Check Point Software Technologies is expanding its virtual security offering...

Resources and articles:
Challenges in managing firewalls
Best Practices for Security Incident Response
DES Encryption Example
Our firewall log analysis blog
Firewall Books

Consulting companies - Do you need assistance in various IT security projects? Here is a list of companies that can help you:

Name Area covered Description
Cerber Technologies Greater Toronto Area IT Security consulting services for small, medium and large organizations. CISSP certification.
Data Perceptions Kitchener/Waterloo, Ontario Information Technology consulting services in the areas of network and systems infrastructure. We offer experienced consultants to provide design, implementation and support services to assist businesses in developing and deploying effective IT strategies.
Vinci Consulting Corp. US-based companies Redundant Datacenter Design & Implementation
Security Policy Development
VISA Cardholder PCI Compliance
DMZ Design and Implementation
PIX Firewall Reviews
Add your company name on this list!

Online Databases maintained by Altair Technologies:
Symantec SEF/Raptor Messages
Symantec SEF/Raptor Daemons
Cisco Pix Messages
TCP/IP Protocols

Tools developed by Altair Technologies:
sanitize - Replaces IP addresses from configuration and log files with random ones
agfind - A command line find utility using regular expressions

Other Internet resources:

comp.security.firewalls

Newsgroup for general firewall discussions

Internet Firewall FAQ

A firewall FAQ list maintained by Matt Curtin and Marcus J. Ranum (considered to be the developer of the first proxy firewall).

LogAnalysis.org Website dedicated to computer systems log analysis - maintained by Tina Bird and Marcus J. Ranum

comp.dcom.sys.cisco

Newsgroup for Cisco products

ISAserver.org

Microsoft's ISA Server FAQ (unofficial)

AttackPrevention Technical articles and How-To's about Checkpoint and Nokia IPSO, maintained by Mitchell E Rowton

FAQ: Firewall Forensics

Analysis of various attack signatures and protocols appearing in firewall logs

Protocols.com Listing of data communications protocols
Internet Storm Center Latest statistics about protocols used in attacks

Send us your suggestions or comments! These could be firewall or VPN resources that you consider quite useful, critical comments or additional type of information that you would like to see here.