Network Audit for Grad Project

Make sure you get permission first, but nessus is a very good overall testing tool and provides many different options. On top of that its freeware.

Get the permission in writing too (including what you are and aren't allowed to do). If you accidently break something they won't be able to blame it on you.. Unless you did something they didn't allow... That's why you need it in writing. That way they can't change their minds when something goes wrong (intentionally or not).

Thanks for your concern, but I have asked and I am allowed.

Sorry this is late, I just signed up to the site today.

If you're still looking to do some network security auditing (my favorite part of my job) you probably want to take a look at running Nessus. You can download it for free from.

www.nessus.org

There is a tutorial on the site for how to use it. It requires no more than a Linux machine and the most basic comprehension of networking to get working.

If you couple Nessus, Nmap, Ethereal (all open-source programs) you have the ability to completely map out and test a network for security weakness on a system by system basis.

Coming from a Cisco background I'd suggest you look into the security on your perimeter routers because they have to pass huge amount of traffic through with little or no packet inspection, but they also have to maintain a level of security on the traffic coming through them. The configuration on them or on your company's firewall would be a good start for background. No reason to re-invent the wheel.