# External Network Penetration Test

# Scoping questions

Here are some data points we will need to scope your external network penetration test:

  • Approximate number of IPs/subnets in scope?
  • Any timing restrictions for when we can and can not test?
  • What domain names do you use for public/marketing Web sites and other business applications?
  • Are Web applications in scope? If so, those are scoped separately.

# Considerations/prerequisites

For external penetration tests, 7 Minute Security will provide you with our public IPs that we conduct penetration testing from - so that you can temporarily allow these IPs in your firewall/IDS/IPS/etc.