Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Firewall performance, capabilities, and function


So far, we have discussed the basic features of a firewall. There are many more functions that can be used for multiple purposes. Let's list these below:

  • URL filtering: Random web surfing  may expose your network to malware that can cause security risks to your organization. URL filtering is a way to limit access by comparing web traffic in a database to prevent employees from accessing unproductive URLs or contents.
  • Antivirus and malware protection: NGFW comes with an inbuilt antivirus engine and malware protection, which is capable of inspecting traffic along with malicious infected files.
  • Integrated IPS/IDS: In a traditional enterprise network, the deployment of IPS/IDS is very common as a separate appliance. A next-generation firewall comes with an IPS/IDS module and can be enabled or disabled according to requirements. The biggest thing to consider is how much traffic we want to pass through the IPS/IDS device and that should be supported...