SANS Whitepaper: Auditing a Nokia Firewall

When I was still doing a lot of operational work, I used to install or manage mainly Nokia/Checkpoint firewalls. This experience still has some use in my day to day work. For those working with this platform either operational or auditing, SANS published a GIAC exam whitepaper on auditing a Nokia Firewall.

Abstract:

EastCoast Enterprises, a Fortune 500 company operates numerous externally facing web applications for maintaining the relationships with its agencies, partners and policyholders, and to provide corporate information to the public. Additionally, EastCoast provides Internet access for its employees and visitors, and VPN remote access to internal resources from computers directly attached to the Internet. Internet presence is an undisputed business necessity for EastCoast Enterprises but opens the network to various security risks, originating both externally and internally.