Auditing Inside the Enterprise via Port Scanning and Related Tools

This paper assumes that the difficulty of maintaining and verifying the state of all systems on a network of any significant complexity is more than most system/network administrators have time to deal with directly. It proposes that internal port scanning (and derivative tools) be used on an ongoing basis to keep watch on various, listed aspects of network security. A number of commercial, freeware, demo, and open source tools are described along with how best to use them to identify problems. Additional consideration and discussion is given to other planning requirements.