Re: Distributed Vulnerability Scanning

["H. Morrow Long" <morrow.long () YALE EDU>]

Connie --

You may also wish to check out NessusWC (web client).

It had a very simplistic design goal for usability (e.g. by anyone)
so I suspect the interface is rather simple and may even lack any
access control -- I keep meaning to spend some time to bring it up
and check it out:

    http://www.securiteam.com/tools/5WP0M00GAQ.html

    http://www.frank4dd.com/nessuswc/

    http://freshmeat.net/projects/nessuswc/

    http://www.networksecurityarchive.org/html/Exploits-HackingTools/ 
2005-07/msg00056.html

- H. Morrow Long, CISSP, CISM, CEH
  University Information Security Officer
  Director -- Information Security Office
  Yale University, ITS



On Aug 23, 2005, at 12:58 PM, Sadler, Connie wrote:

> Does anyone use a commercial scanner – something like Tenable? The  
> software would allow us to set up accounts and delegate rights for  
> some of our system administrators to run their own scans. The  
> management console would allow us to review results from all of the  
> scans. Does anyone use a commercial appliance and if not, does  
> anyone have a home-grown Nessus interface that makes using Nessus  
> in a distributed environment easier?
>
>
>
> Thanks…
>
>
>
> Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
> Director, IT Security, Brown University
> Box 1885, Providence, RI 02912
> Connie_Sadler () Brown edu
> Office: 401-863-7266
> PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
> PGP Fingerprint: DA5F ED84 06D7 1635 4BC7  560D 9A07 80BA 91E3 8EFB