Pix device manager communications protocol

[Rogan Dawes <discard () dawes za net>]

Hi folks,

I'm curious to know whether anyone has tried to observe the 
communications protocol between the browser and firewall when using the 
Pix device manager? I'm guessing it is just a Java applet, accessing an 
HTTPS "web application" running on the Pix.

I have created a program called webscarab which can intercept HTTPS 
requests, and log whatever is sent between client/browser and 
server/firewall. I would be very interested in seeing a sample of the 
communications, if anyone feels like testing this in their lab.

Unfortunately, I don't have access to any Pixen, so can't do this myself.

Interested folks can get WebScarab from 
https://sourceforge.net/project/showfiles.php?group_id=64424&package_id=61823

It requires a 1.4 or later JRE.

Just specify a new or otherwise empty directory when it starts up, 
configure your browser to use localhost:8008 as a proxy for SSL 
requests, and then use the PDM as usual. WebScarab should show the 
various requests and responses made during the interaction. Most 
valuable would be logs showing both read access, as well as some changes.

Enterprising folks might like to play with intercepting requests and 
modifying key values, to test for buffer overflows, etc.

Then simply zip up the directory, and mail it to me. DON'T use a 
production Pix for this, obviously, and make sure it has no sensitive 
passwords in the configuration!

Many thanks

Rogan
--
Rogan Dawes

*ALL* messages to discard () dawes za net will be dropped, and added
to my blacklist. Please respond to "lists AT dawes DOT za DOT net"
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards