Re: nipper studio experiences?
Shawn Summers <[email protected]> Thu, 17 Jul 2014 19:23:20 +0000
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <F92502A7F4557C4E9C5F67AF068152EEA489E683@MMOEX10MBS01.jhacorp.com> |
--===============1504127243== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_F92502A7F4557C4E9C5F67AF068152EEA489E683MMOEX10MBS01jha_" --_000_F92502A7F4557C4E9C5F67AF068152EEA489E683MMOEX10MBS01jha_ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Very good experience with the tool, features and usefulness have greatly in= creased in recent months. They support current versions of many common ven= dors' devices, well publicized list on their website (https://www.titania.c= om/nipperstudio/networkdevices). Very easy to use- you feed it raw config = files and it parses them line-by-line, then generates reports on findings. = Default best practices baseline is pretty good, and you can customize poli= cies to include or exclude particular checks globally, or for certain devic= e types, etc. Also supports using CVSS for the measuring stick. It can al= so compare current config/report to previously saved results. Several repo= rt types are available from text, html, pdf, xml, to a few different choice= s of .csv reports. Some of the recent feature additions I haven't yet had = much chance to play with include software bulletin/vulnerability applicabil= ity reports, SANS baseline/best practice policies, and PCI report generatio= n. I have only one complaint from years of use. One of the .csv reports has s= ome formatting problems, so it isn't reliable to feed into any other tools = or automated processing. Since the finding data verbiage is constant throu= ghout reports, I've been able to manually workaround this with some masterf= ul copy & paste skills. It is a client application that runs on your everyday laptop/desktop, you p= oint it to saved config files; it does not "live" anywhere in your infrastr= ucture as an appliance or bump on the wire. It does not assume or try to i= nduce any context between or amongst the devices - it simply parses them li= ne by line and evaluates the config for best practices. It does not have a= ny mapping functionality; doesn't generate diagrams, cannot be fed any diag= rams. In summary, I have found it a very effective and valuable tool for a reason= able price, and it has been greatly improved since going commercial. I hig= hly recommend it. ss From: [email protected] [mailto:firewall-wizar= [email protected]] On Behalf Of Darden, Patrick Sent: Monday, July 14, 2014 12:50 PM To: Firewall Wizards Security Mailing List ([email protected]= trust.com) Subject: [fw-wiz] nipper studio experiences? http://www.titania.com/nipperstudio Our audit folks are talking about this. Anyone have any experience with it= -good or bad? Is it effective? I am guessing it is an expert system that = simply looks for certain conf details or juxtapositions? Does it do it bet= ween devices? Do you have to feed it a network map? Does it take a lot of= hand-holding, configuration, setup? Thanks, --p NOTICE: This electronic mail message and any files transmitted with it are = intended exclusively for the individual or entity to which it is addressed. The mess= age, = together with any attachment, may contain confidential and/or privileged in= formation. Any unauthorized review, use, printing, saving, copying, disclosure or dist= ribution = is strictly prohibited. If you have received this message in error, please = immediately advise the sender by reply email and delete all copies. --_000_F92502A7F4557C4E9C5F67AF068152EEA489E683MMOEX10MBS01jha_ Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:windowtext;} span.EmailStyle18 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Very good experience w= ith the tool, features and usefulness have greatly increased in recent mont= hs. They support current versions of many common vendors’ devic= es, well publicized list on their website (<a href=3D"https://www.titania.c= om/nipperstudio/networkdevices">https://www.titania.com/nipperstudio/networ= kdevices</a>). Very easy to use- you feed it raw config files and it parses them line-by-= line, then generates reports on findings. Default best practices base= line is pretty good, and you can customize policies to include or exclude p= articular checks globally, or for certain device types, etc. Also supports using CVSS for the measuring stick.= It can also compare current config/report to previously saved result= s. Several report types are available from text, html, pdf, xml, to a= few different choices of .csv reports. Some of the recent feature additions I haven’t yet had much chance to play w= ith include software bulletin/vulnerability applicability reports, SANS bas= eline/best practice policies, and PCI report generation. <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">I have only one compla= int from years of use. One of the .csv reports has some formatting pr= oblems, so it isn’t reliable to feed into any other tools or automate= d processing. Since the finding data verbiage is constant throughout reports, I’ve been able to manually workaroun= d this with some masterful copy & paste skills.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">It is a client applica= tion that runs on your everyday laptop/desktop, you point it to saved confi= g files; it does not “live” anywhere in your infrastructure as = an appliance or bump on the wire. It does not assume or try to induce any context between or amongst the devices – it sim= ply parses them line by line and evaluates the config for best practices.&n= bsp; It does not have any mapping functionality; doesn’t generate dia= grams, cannot be fed any diagrams. <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">In summary, I have fou= nd it a very effective and valuable tool for a reasonable price, and it has= been greatly improved since going commercial. I highly recommend it.= <o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">ss<o:p></o:p></span></= p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> firewall= [email protected] [mailto:firewall-wizards-bounces@lis= tserv.icsalabs.com] <b>On Behalf Of </b>Darden, Patrick<br> <b>Sent:</b> Monday, July 14, 2014 12:50 PM<br> <b>To:</b> Firewall Wizards Security Mailing List (firewall-wizards@listser= v.cybertrust.com)<br> <b>Subject:</b> [fw-wiz] nipper studio experiences?<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><a href=3D"http://www.titania.com/nipperstudio">http= ://www.titania.com/nipperstudio</a><o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Our audit folks are talking about this. Anyone= have any experience with it—good or bad? Is it effective? = ; I am guessing it is an expert system that simply looks for certain conf d= etails or juxtapositions? Does it do it between devices? Do you have to feed it a network map? Does it take a lot of hand-hol= ding, configuration, setup?<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Thanks,<o:p></o:p></p> <p class=3D"MsoNormal">--p<o:p></o:p></p> </div> <p>NOTICE: This electronic mail message and any files transmitted with it a= re intended<br> exclusively for the individual or entity to which it is addressed. The mess= age, <br> together with any attachment, may contain confidential and/or privileged in= formation.<br> Any unauthorized review, use, printing, saving, copying, disclosure or dist= ribution <br> is strictly prohibited. If you have received this message in error, please = <br> immediately advise the sender by reply email and delete all copies.</p></bo= dy> </html> --_000_F92502A7F4557C4E9C5F67AF068152EEA489E683MMOEX10MBS01jha_-- --===============1504127243== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ firewall-wizards mailing list [email protected] https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards --===============1504127243==--