Firewall Rule Testing

[Scuzz3y]

I would like to have someone test the current firewall rules we have in place. This task requires some knowledge of networking.

Network Zones To Test

• Project networks
  • To Managment network
  • To outside world
    • DNS should be going through the Management DNS server
• Any network -> Management network
• Access available from the VPN networks
• External attack surface
  • Public internet -> WAN / DMZ
• DMZ -> Management network

Deliverables

• Organized notes of any issues found or anything that seems weird
• Could users be given more access on one network?
• Do users have access to some boxes they shouldn't?