mail filters / web filters

pma111
pma111 used Ask the Experts™
on
I cant find any audit benchmarks/checklists for auditing the configuration of mail filters and web filters like websense. Can anyone point me in the direction, or if you manage such systems yourself a top 20 checks youd go through to audit the configuration and management of such... Im staggered there seems so little to assist audits / security assessments of such technologies when every organistion worth their salt will use such filters.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
btanExec Consultant
Distinguished Expert 2018

Commented:
a template that you can check out for web filter as starter
http://www.infotech.com/research/web-content-filter-evaluation-checklist?c=unlock1

Author

Commented:
Thanks Breadtan, this seems more a guide of selecting which WF is suitable to the organisation, as opposed to a list of healtchecks to perform once the WF is in place, albeit tech neutral..
Exec Consultant
Distinguished Expert 2018
Commented:
Understand that you are looking at specific test cases...don't see any readily one in open but thought the squid knowledge base may habeas some. This link state it functional support which can be the categories and specific for the test cases. I see the critical one as relating to the engine testing the evasiveness detection as well as the adapativeness of identifying new threats using scripts like how snort has

 http://www.safesquid.com/html/portal.php?page=105

This review though old also cover more aspects. .. More of breadth...not depth though

 http://mobile.scmagazine.com/websense-web-security-suite-63/mreview/291/

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial