|
Wipro carried out an exhaustive examination of
the firewalls to give an objective up-to-date
report on security status as seen from the outside
world. Ten firewalls were covered by the Penetration
Testing scope for this assignment.
Wipro addressed the customer's pain areas by
understanding the size and scope of the network
security. It then carried out an ‘External
Internet Security Penetration Testing’ on
the firewalls via the internet to identify the
security vulnerabilities and potential risks associated
with those vulnerabilities. A simulation of real-world
attacks was conducted with the help of various
tools, scanners and scripts to exploit system
vulnerabilities via the Internet.
The penetration testing was carried out in the following
phases,
 |
Identifying
open services |
 |
Mapping network configuration / topology from
outside |
 |
Identifying all servers, operating systems
and applications |
 |
Identifying vulnerabilities and analyzing
impacts and risks |
 |
Denial of Service
attacks |
 |
Reporting and recommending solutions |
Wipro analyzed the findings of the test for possible
harm and recommended solutions that were based
on the causes and potential impacts. The customer
is in agreement with the recommendations and is
taking necessary steps to secure the network inline
with the solution suggested by Wipro.
|