I am trying to punch a hole through a firewall in front of a webserver in order to be able to scan the webserver acurrately. Has anyone done this before or know of a better method to do remote scans through owned firewalls? The FAQ states that results will be obscured... is this even possible? With Nessus' client server relationship could the server be setup behind the firewall and the communications between the client and server be done through an encrypted sleeve?
Also, what are the best methods to scan a firewall itself, for vulnerabilities?
Thank You,
Troy
