Search Events Introduction Packet filters form a fundamental component of the overall security of the BorderManager firewall. They need to be designed so as to allow the required functionality but at the same time prevent all undesired traffic from passing. Not only could your organization be the target of such attacks but their distributed nature could mean that your organization is used as an unwitting accomplice to these attacks by hosting agents that can be remotely controlled and used to launch attacks against other sites. Before an attacker can attempt to compromise a site it is necessary to search for open channels that are exploitable. These tools use a variety of techniques to fulfil this function and can provide reports detailing open channels.
Attackers are then able to further investigate the open channels before launching specific attacks.
The aim of this AppNote is to provide you with the knowledge necessary to optimize the packet filters used by BorderManager so as to increase the overall security of the product. This article is specifically aimed at administrators charged with configuring and administering BorderManager firewalls. Suggestions made within this AppNote should only be implemented by those with a full understanding of the issues involved. Badly configured firewalls are worse than having no firewalls at all as they lead to a false sense of security.