Is there a tool which I can use to monitor network traffic so that I can determine firewall rules and implement them on an existing network?

migrated from stackoverflow.com May 21 '10 at 16:47

This question came from our site for professional and enthusiast programmers.

  • What type of firewall do you have? – l0c0b0x May 21 '10 at 16:50

Well, sounds like you just need to get a good read on what sort of traffic is crossing your network. For that, set up a mirrored port on one of your switches, connect a PC to it, and fire up Wireshark. After getting a packet capture, you'll be able to very easily see what's going on.

When doing this sort of work, I typically start from a "deny all" perspective. Assume that you're going to block everything, and then make a list of what applications need to be accessible through the firewall, and what allow rules you'll need for each of them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.