Re: [Security Weekly] SecurityCenter alternative

[Larry Petty <lspetty () gmail com>]

Ken,

Since these locations do not have Internet connectivity, I assume you have
point to point circuits between them? Otherwise any solution will require
you to manually combine your scan data.

If you do have connectivity between the sites, you can use the new Muiti
Scanner feature in Nessus. You'll then need something to parse the scan
data. Since your not using this for one-time consulting engagements, you
would probably want to dump the data into SQL or even Access.

You could also use Carlos Perez's Nessus PowerShell script to parse the
data into a .csv file. For the most part, it works well.  If creative it
should provide all the data you need. I did have some issues with it and
didn't get a response from Carlos when I emailed him. However, we ended up
creating a little .Net app to clean up the data.

Next, build yourself an Excel spreadsheet template with all of the data you
want to see. One way to do this is to import all the data into a master
worksheet. Then create separate worksheets with pivot tables that break the
data down into "dashboards". You can use these worksheets to create charts,
display trending, sort and filter vulns, and even display remediation
reports.

You could import the data into your Excel template directly from Access or
from data parsed from the above mentioned PowerShell script.






On Fri, Aug 1, 2014 at 7:41 PM, Tim Krabec <tkrabec () gmail com> wrote:

> ssh port forwarding?
>
> Tim Krabec
> tkrabec.com
> Bio <http://timkrabec.brandyourself.com/>
>
>
>
> On Wed, Jul 30, 2014 at 1:03 PM, Kai Zen <k41zen () me com> wrote:
>
> > So I've got 4 separate Nessus scanners on 4 separated networks with no
> > connectivity to the internet.
> >
> > Does anyone know of an alternative to the reporting, trending and
> > filtering capabilities of SecurityCenter? Ideally free. The scanner
> > management pieces of SecuirtyCenter are of no benefit to me as the scanners
> > are separate and the costs are just too high.
> >
> > What I'm looking for is something to take the output from the scans and
> > correlate that information to give me that central view.
> >
> > Grateful for any info.
> >
> > jcvd
> > _______________________________________________
> > securityweekly mailing list
> > securityweekly () mail securityweekly com
> > http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> > Main Web Site: http://securityweekly.com
>
>
> _______________________________________________
> securityweekly mailing list
> securityweekly () mail securityweekly com
> http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
> Main Web Site: http://securityweekly.com
_______________________________________________
securityweekly mailing list
securityweekly () mail securityweekly com
http://mail.securityweekly.com/cgi-bin/mailman/listinfo/securityweekly
Main Web Site: http://securityweekly.com