I am involved in a software evaluation between CheckPoint Zone Alarm and McAfee Firewall.
In addition to normal port scanning type of tests, I plan to use the free SSTS software from Matousec to test the ability to prevent outbound communication (leak testing).
Anybody used these tools?
Are the leak tests performed by SSTS valid, real world, and fair?
http://www.matousec.com
