test VPN laptop for Security flaws

[Wazz]

Hi,

i have this posted on the VPN forum but its getting little response and also falls under he category for this forum.
My other thread is here

http://www.tek-tips.com/viewthread.cfm?qid=1288992&page=1

basically, im after a way to test security on a laptop that we give to homeworkers. Not over a LAN but from the internet into a pc behind a NAT enabled firewall.

Thanks everyone,
Wazz

 

[NJForensics]

Shadow Security Scanner... check it out.. it scans port vulnerabilities. Hope that helps.

Chris Clancy, EnCE
Miles Technologies
clancy@4miles.com

 

[Tyras]

Also keep in mind as to what the users will be able to do with these machines away from work. If they are able to use that laptop in an irresponsible way outside of the work enviornment and allow for open ports, unpached vulnerabilities, or getting malware, any attacker will be able to get into that machine, and if they are savvy, could enter your work network through a trusted connection (VPN).
As far as testing it, I usually use nessus to scan it, and go for an nmap after that to see what it will show.
Just use your best judgment as you would a work machine.
Assuming an XP Pro and domain environment, Group policy is your friend, and what i normally do is remind them (word for word) of that AUP they signed when joining the company. If you don't have one already, it's a great tool.

"you did what to my computer??..your fired"

Tyras