Firewall or Port Scanner

Hi all,

You'll all be familiar with free, self-service Internet-based port-scanning tools;

Sheilds Up

PC Flank SOS Metrics These only work with any degree of reliability if you have a direct connection to the Internet with a real IP address.

There are also lots of utilities for administrators to scan internal networks (nmap, GFI LanGuard, etc).

However, I'm after "something in between".

We have a network where users are free to connect their own computers. (this network is firewalled off so it has extremely limited access to the rest of the network). The rest of the network is reasonably secure, but there's a risk that users can infect each other WITHIN this network (more than a risk, really, it's certain to happen!)

We can ask users to ensure they have firewalls/anti-virus/etc, and to some extent we can enforce it (eg using CheckPoint's Integrity Clientless Security). However, as a first step, I'd like users to be able to browse to a web server WITHIN the network where they click "SCAN", then the web server will scan their host for open ports. They then get a simple red/amber/green assessment/diagnosis of vulnerabilities. The idea is, we SCARE them into applying security measures!

I've checked the popular free self-service scanners, but none offer a service we can host on our network. Specialist tools (eg GFI LanGuard) are for administrator use. I can't find a service we can host on our network that provides self-service scanning. Anyone have any ideas?

Kind regards,

Anwar