[157600] in North American Network Operators' Group
RE: Network scan tool/appliance horror stories
daemon@ATHENA.MIT.EDU (Jones, Barry)
Tue Oct 30 13:57:21 2012
From: "Jones, Barry" <BEJones@semprautilities.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Tue, 30 Oct 2012 10:57:02 -0700
In-Reply-To: <002501cdb6c3$303a2f90$90ae8eb0$@gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Speaking of scan tools, does anyone have recommendations for tools to do ba=
seline configurations on Windows systems? Looking for pre-change configurat=
ion baseline and post change configuration baseline - to identify differenc=
es implemented by the change?
Thanks.
-----Original Message-----
From: Chuck Church [mailto:chuckchurch@gmail.com]=20
Sent: Tuesday, October 30, 2012 10:23 AM
To: nanog@nanog.org
Subject: RE: Network scan tool/appliance horror stories
Network scan tools are a great way to verify what important protocols you l=
eft out of your control plane policing non-default policies. Had a scanner=
totally clog up our 6500 core router DHCP relay (ip helper) function once.
Uggghhh, security people....
Chuck
