Trends
Denial of Service attacks are rising. Attacks cost organizations
time and money. Even though 98% of organizations use firewalls,
1/3 are still at risk from DoS attacks. In response, equipment
vendors are integrating firewalls with many other security
features, such as intrusion detection, deep packet inspection
and VPNs. As a result, firewall performance is becoming harder
and harder to characterize. An underdimensioned firewall can
be a network bottleneck and a single point of failure!
New Test Challenges
These trends are creating new test challenges for firewall
manufacturers and network operators. It is no longer possible
to rely on simple vendor specifications -- firewall performance
is intimately related to the network configuration and applications
of the end users.
- Application-aware firewalls must be tested with real,
stateful traffic from a mixture of applications.
- DoS attacks impact firewall performance. In our lab, we
have brought a mid-priced firewall to a standstill.
- Advanced firewall features, such as content filtering,
degrade firewall performance. What is the security-performance
trade off?
NetworkTester -- An Integrated Solution
By taking an integrated approach to testing, the Agilent
NetworkTester accelerates your development or deployment of
firewalls and integrated security gateways.
The NetPressure application covers all your network security
and content networking test needs:
- A broad range of protocol bricks covers applications such
as web, email, news, file transfer/sharing, instant messaging
and streaming. Mix multiple protocols on a single port to
create realistic and complex tests.
- Fully integrated access protocols and VLAN support allow
faster and easier test set-up. Generate stateful traffic
over IPsec, PPPoE, DHCP and 802.1x. No need for scripts.
- Scale the test up easily to reach the limits of the firewall.
Watch how it drops connections before your users do!
- Firewalls use timers and keep state information. NetPressure's
real-time control lets you dynamically change parameters
while the test is running. You don't need to stop and restart
the test at a critical moment.
|