How to Cheat at Configuring Open Source Security Tools

This is the perfect reference for the Multitasked SysAdmin. This is the perfect guide if network security tools is not your specialty. It is the perfect introduction to managing an infrastructure with freely available, and powerful, Open Source tools. Learn how to test and audit your systems using products like Snort and Wireshark and some of the add-ons available for both. In addition, learn handy techniques for network troubleshooting and protecting the perimeter. Take Inventory - see how taking an inventory of the devices on your network must be repeated regularly to ensure that the inventory remains accurate. Use Nmap - learn how Nmap has more features and options than any other free scanner. Implement Firewalls - use netfilter to perform firewall logic and see how SmoothWall can turn a PC into a dedicated firewall appliance that is completely configurable. Perform Basic Hardening - put an IT security policy in place so that you have a concrete set of standards against which to measure. Install and Configure Snort and Wireshark - explore the feature set of these powerful tools, as well as their pitfalls and other security considerations. Explore Snort Add-Ons - use tools like Oinkmaster to automatically keep Snort signature files current. Troubleshoot Network Problems - see how to reporting on bandwidth usage and other metrics and to use data collection methods like sniffing, NetFlow, and SNMP. Learn Defensive Monitoring Considerations - see how to define your wireless network boundaries, and monitor to know if they're being exceeded and watch for unauthorized traffic on your network. This title covers the top 10 most popular open source security tools including Snort, Nessus, Wireshark, Nmap, and Kismet. Companion Web site contains dozens of working scripts and tools for readers. This book follows Syngress' proven 'How to Cheat' pedagogy providing readers with everything they need and nothing they don't.