External vulnerbility testing 2

[tpluskota]

I currently use ISA 2004 as a firewall, im hosting a web server and also VPN access into my network. Im currently reviewing the security on the network and have installed GFI LanGuard to test internal security / vulnerbilities but Id like some advise on any good software to test vulnerbilities externally ie on my web server / open ports on my firewall etc.
Open source / freeware would be nice!!

Thanks

 

[lgarner]

nmap, nessus.

 

[rliebsch]

http://www.insecure.org/tools.html

This is a list of the top 75 tools.

Robert Liebsch
Stone Yamashita Partners

http://www.stoneyamashita.com/

 

[airbourne]

http://www.grc.com

This site has a tool called Shields Up! that can tell you if your ports are stealthed or not.

Shields Up! does not test for code vulnerabilities such as "SQL Injection" or any other software based bugs.