This section of Snake Oil Research is dedicated to web applications that may or may not be useful to you. Below you will find a list of useful tools that are planned to be released sooner (or later) as and when I get the time to do so. As each tool is ready, the link will become live and a blog entry will go out. Better subscribe to the RSS feed on the main page to ensure you get the update.
The apps are simple and are going to take the form of a bunch of HTML form fields into which you'll dump data. Clicking submit will give you a result. They already exist as cli scripts that I use everyday, but I thought I'd get more Karma if I'd make them available to all.
Thanks go the kind chap who is allowing me to host with him! He knows who he is.
All support for these apps is down through Twitter.
Completed
τFirewall object creator
Feed it names and IP addresses and it vomits up a object creation script
Currently supports:
- Juniper Screen OS Firewalls
- Check Point Firewalls (in fact, all their products that share the SmartCenter management server - even InterSpect!)
Comming Soon:
- Fortinet Firewalls
- Cisco ASA/PIX Firewalls
- Palo Alto Firewalls (or what-ever the meh they are calling them)
- Support for defining subnet objects in addition to host objects
Σ Firewall NAT configuration creator
Feed it IP address pairs and it vomits up a 'set interface "eth0" mip 1.1.1.1 host 2.2.2.2' script
Currently supports:
- Juniper Screen OS Firewalls
Comming Soon:
- Fortinet Firewalls
In Progress
ΔFortinet object creator
Feed it names and IP addresses and it vomits up a Fortinet address script
Likely going to be added to Σ
ΓFortinet VIP creator
Feed it IP address pairs and it vomits up a VIP script
Likely going to be added to τ
ηCheck Point Log Analysis Methodology - not an app
Feed it an ascii Check Point log file (i.e. fw log -blah -blah > ./file.cplog) and it will sort and consolidate these based on rule UUID in order for you to determine how often rules are 'hit' and what is hitting them. Ideal for tightening up 'open rules' (any any http accept) and detecting unused rules. This will not be web based as it uses the unix sort and uniq commands which will 100% CPU your box.
λLayer 3 Mapper
Feed it topology information (host name, interface name, IP and netmask) and it will churn out a network diagram ready for import right into Visio, Omnigraffel Dia or Kivio.