The E3 External Vulnerability Assessment provides your organization with a clear understanding of the risks present on your external network. External threats are those posed by external sources such as hackers, virus, and trojans to your systems that are accessible via the internet. Typical systems include firewalls, routers, VPN concentrators, web sites, email, and domain name servers. E3 will run a series of tests to clearly define any vulnerabilities, identify possible threats that the vulnerabilities pose and provide detailed recommendations on how to fix any deficiencies.
Process
E3's Internal Vulnerability Assessment service follows the basic process outlined below:
- Receive signed vulnerability testing waiver from company
- Perform passive reconnaissance of the companies external systems and presence
- Determine live hosts
- Conduct port scans of all live hosts (all scans will come from a predefined number of external IP addresses during a time that is mutally agreeable)
- Conduct vulnerability assessment using vulnerability scanning tools
- Verify vulnerabilities using manual scanning and verification techniques to eliminate false positives
- Write report of all vulnerabilities including remediation steps
- Review report with internal staff
Items Reviewed
The following specific items are covered during the scope of an Internal Vulnerability Assessment:
- Firewall Vulnerability Scanning - E3 will conduct port scanning and vulnerability scans against all provided IP addressess to determine any potential problems.
- Firewall / Router Configuration - If provided, E3 will conduct a detailed analysis of the ruleset using industry best practice guidelines
- Host Vulnerability Scanning - E3 will scan all available hosts to determine if any vulnerabilities are present. Possible hosts include - VPNs, websites, DNS, etc.
- War Dial - All the organization's provided telephone numbers will be called to determine if modems are available and answering