Educause Security Discussion mailing list archives
Re: NESSUS
From: Phillip G Deneault <deneault () WPI EDU>
Date: Thu, 24 Feb 2005 09:18:53 -0500
A similar setup in a prepacked form can be found here: http://vsc-dev.itsp.purdue.edu/ Purdue did away with their ISS scanner in favor of this solution. It works very well. I'm hoping to upgrade to this version this summer. Phil Matthew Keller wrote:
We use an SSI cluster (OpenMosix/Linux) to handle a number of network- wide monitoring/crawling/scanning tasks. Nessus itself isn't very clusterable as-is, so we run identical Nessus servers on the cluster nodes, and a control application we developed using the Perl Net::Nessus module handles connecting to the cluster nodes, and subdividing the network into smaller pieces for each node to work at. When a node is done with its piece, it gets another piece- Kind of like how SETI@Home works, if you've used it. Results are placed in a SQL database by the control application. On Thu, 2005-02-24 at 08:43 -0500, Chad McDonald wrote: I amy trying to use Nessus to do a baseline vulnerability scan of our university network. To date, I am not having much luck finding the right hardware that can support this large of a scan (20+ subnets) in a reasonable timeframe. Before I make a purchase, could those of you using Nessus let me know what kind of hardware you have had success with? My current "desktop pc" configuration running on Suse just doesn't fit the bill. Thanks, Chad McDonald, CISSP Chief Information Security Officer Georgia College & State University 478.445.4473 Office 478.454.8250 Cell 478.445.1202 Fax
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
--
Matthew Keller Enterprise Systems Analyst Computing & Technology Services State University of New York @ Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Phil Deneault "We work in the dark. We do what we can. deneault () wpi edu We give what we have. Network Security Analyst Our doubt is our passion, Network Operations and our passion is our task. Worcester Polytechnic Institute The rest is the madness of art." http://www.wpi.edu/~deneault/ - Henry James -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- NESSUS Chad McDonald (Feb 24)
- <Possible follow-ups>
- Re: NESSUS Matthew Keller (Feb 24)
- Re: NESSUS Phillip G Deneault (Feb 24)
- Re: NESSUS Peter Moody (Feb 24)
- Re: NESSUS Matthew Keller (Feb 24)
- Re: NESSUS Josh Richard (Feb 24)
- Re: NESSUS Josh Richard (Feb 24)
- Re: NESSUS Kevin Shalla (Feb 24)
- Re: NESSUS Brian K. Dore' (Feb 24)