Re: [Security Weekly] SecurityCenter alternative

[k41zen <k41zen () me com>]

Thanks for all of your help. 

We are in discussions with our Tenable contact about solutions for this issue. They’ve helped me out by enabling me to 
move forward to at least deploy this into a Pre-Production environment but the costs of SC are a massive stumbling 
block; hence my question about something else. Appreciate we have a big Nessus fan base here of which I am a member 
too, but just wondered what could be wrapped around it.

I’ll take a look at the suggestions made and if I find something will let you know.

Thanks again.

On 2 Aug 2014, at 16:01, Moses Hernandez <moses () moses io> wrote:

> RISU is good, I would also check out the following @DigiNinja Tool:
>
> http://digi.ninja/projects/nexcser.php
>
> Nexcser can do take .nessus2 file outputs and combine them into a single csv. That may help.
>
> I personally don't think that the value of Security Center is that. One of the new things I've noticed you can do in 
> the Latest Nessus is you can control different sensors from the UI, but I understand if your truly air gapped that 
> the functionality is not going to help you, in that way, Security Center would also not help as it was designed 
> probably.
>
> Moses
> @mosesrenegade
> www.moses.io
>
>
>
>
> On Sat, Aug 2, 2014 at 7:26 AM, Larry Petty <lspetty () gmail com> wrote:
> Ken,
>
> Since these locations do not have Internet connectivity, I assume you have point to point circuits between them? 
> Otherwise any solution will require you to manually combine your scan data.
>
> If you do have connectivity between the sites, you can use the new Muiti Scanner feature in Nessus. You'll then need 
> something to parse the scan data. Since your not using this for one-time consulting engagements, you would probably 
> want to dump the data into SQL or even Access.
>
> You could also use Carlos Perez's Nessus PowerShell script to parse the data into a .csv file. For the most part, it 
> works well.  If creative it should provide all the data you need. I did have some issues with it and didn't get a 
> response from Carlos when I emailed him. However, we ended up creating a little .Net app to clean up the data.
>
> Next, build yourself an Excel spreadsheet template with all of the data you want to see. One way to do this is to 
> import all the data into a master worksheet. Then create separate worksheets with pivot tables that break the data 
> down into "dashboards". You can use these worksheets to create charts, display trending, sort and filter vulns, and 
> even display remediation reports.
>
> You could import the data into your Excel template directly from Access or from data parsed from the above mentioned 
> PowerShell script.
>
>
>
>
>
>
> On Fri, Aug 1, 2014 at 7:41 PM, Tim Krabec <tkrabec () gmail com> wrote:
> ssh port forwarding?
>
> Tim Krabec
> tkrabec.com
> Bio
>
>
>
> On Wed, Jul 30, 2014 at 1:03 PM, Kai Zen <k41zen () me com> wrote:
> So I've got 4 separate Nessus scanners on 4 separated networks with no connectivity to the internet.
>
> Does anyone know of an alternative to the reporting, trending and filtering capabilities of SecurityCenter? Ideally 
> free. The scanner management pieces of SecuirtyCenter are of no benefit to me as the scanners are separate and the 
> costs are just too high.
>
> What I'm looking for is something to take the output from the scans and correlate that information to give me that 
> central view.
>
> Grateful for any info.
>
> jcvd
> _______________________________________________
> securityweekly mailing list
> securityweekly () mail securityweekly com
> http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> Main Web Site: http://securityweekly.com
>
>
> _______________________________________________
> securityweekly mailing list
> securityweekly () mail securityweekly com
> http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> Main Web Site: http://securityweekly.com
>
>
> _______________________________________________
> securityweekly mailing list
> securityweekly () mail securityweekly com
> http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> Main Web Site: http://securityweekly.com
>
> _______________________________________________
> securityweekly mailing list
> securityweekly () mail securityweekly com
> http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> Main Web Site: http://securityweekly.com

_______________________________________________
securityweekly mailing list
securityweekly () mail securityweekly com
http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
Main Web Site: http://securityweekly.com