Network Computingwww.networkcomputing.com

We used a Compaq Computer Corp. ProLiant DL380 as our central server. It is a dual Pentium III 933-MHz system, with 640-MB RAM and dual 9.1-GB Ultra3 SCSI drives in a striped RAID array. We used Microsoft Windows 2000 as the operating system, and Microsoft IIS or SQL 2000 when necessary. The client machines were Dell Computer Corp. OptiPlex GX1 systems running Windows 98. Our attack machine was a Dell OptiPlex GXa running Windows 95. We used several Trojan-type viruses and attack programs downloaded from the Internet, as well as Sheepshank, written by Ifeanyi Echeruo.

To determine if the firewalls could handle dynamic IP addresses, we set up a Dell OptiPlex GX1 running Red Hat Linux 7.1 and DHCP. We had the leases expire every five minutes and forced the clients to get a new IP on the next lease.

To simulate multiple networks, we used a Cisco Systems 4700 router to create two subnets. One network was the corporate LAN; the other, the Internet. The router forwarded only TCP/IP packets. Initial deployment was done with standalone installers that could be distributed on CD, across the network or off an intranet Web page.