Re: [Openvpn-users] OpenVPN client security checks

[Jason Haar <Jason.Haar@xxxxxxxxxxxxx>]

John A. Sullivan III wrote:
> May I ask, what kind of tools are being used to scan these systems? I
> can certainly think of NMAP, maybe Nessus although I'm a little hesitant
> there.  What else? Are there any good how-to documents on the subject?
> Thanks - John
>   
* nmap can do a remote scan
* smbclient/rpcclient  can be used (with appropriate credentials) to
interrogate Windows boxes (i.e. if only machines that are part of your
official work
  domain are meant to be OpenVPN'ing in)
* ssh can be used to interrogate Unix boxes (i.e. if only Unix machines
owned by your company are meant to be OpenVPN'ing in)

If all of that sounds strange, don't forget that is how 99% of the
corporate world operates their internal Windows network at this very
moment.

and last of all - a simple perl daemon could be installed on any remote
client that can be interrogated remotely - obviously someone would have
to write that.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users