CheckPoint NG Testing

[marthanetguru]

Hi,

i want to test the Stealth of my Firewall (OS and Ruleset).

In my internal network im working with Nessus Security Scanner and all works well.

But when i tested my Firewall last week from an outside network with nessus, i am not getting an report (Error: "empty report").

This Error-Message was OK, because probably the firewall drops all the Packets from the nessus scanner. But my problem is that nothing of the port-scan appears in the LOG of FW??

Have anyone any useful hints / links for me ???? Or own experience???

Thanks a lot,
Matthias

 

[rn4it]

Check your rules, there should be a rule similar to the following:
any to Firewall using any drop
You might not have this logging which would be why your not seeing your port scans showing up. You also probably don't want this logging as it will very quickly build up your log files.

 

[stooo]

This sounds more like an error with the scanning software than the checkpoint firewall