Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

RE: Alternatives to Nessus, License question

Subject: RE: Alternatives to Nessus, License question
Date: Wed, 24 Aug 2005 10:43:54 -0500
On Wednesday, August 24, 2005 9:36 AM, Ron Gula wrote

I also agree here - who cares where you get the executables, as long
as you do the registration through the Nessus web site?  This just
doesn't make much sense to me.  Is it supposed to limit technical
support hassels by limiting the number of outdated binaries in the
wild?  Even if someone made an appliance, you'd still have to
register on the Nessus web site, right?

This is the core issue. Tenable does not grant the right for people to
bundle the plugin feed with their products. I can buy symantec
anti-virus for $39/year, but that does not give me the right to
bundle it and resell it in my own security package. Just because we
sell direct feeds and have registered feeds available to the public,
doesn't give them the right to re-sell it as their own product or
their own content. 

This may seem like a fine line here, but to Tenable there is a big
problem when someone puts Nessus and the Tenable plugins on an
appliance and calls it the 'Scanner Pro 9000'. (I made that up BTW)
Or even more interesting are larger companies who are including
Nessus in their router, switch, authentication, ids, sim, .etc system.

Tenable does not have any formal agreements with any product vendors
who use Nessus in their solutions.

Ron Gula, CTO
Tenable Network Security


So the question originally asked hasn't really been answered.

I am using the Nessus version that is maintained by Javier
Fernandez-Sanguino for Debian GNU/Linux.

The bundeled installation files are stored on Debian GNU/Linux servers
and their mirrors for download.

Javier's version installs preconfigured to pull from the GPL feed.

However, I have registered with Tenable to get access to the Registered
Feed.

I must reconfigure my not downloaded from www.nessus.org and not
compiled on my system version of Nessus to use the Registered Feed.

Does this violate the licensing agreement I accepted when I registered
for the Registered Feed? [Y/N]_

-Jason

PS - I apologize in advance for the legal disclaimer at the bottom of my
email message.  This is tacked on by our SMTP gateway and I have no
control over it.
-- 

------------------------------------------------------------------------------
Confidentiality notice:
This e-mail message, including any attachments, may contain legally privileged 
and/or confidential
information. If you are not the intended recipient(s), or the employee or agent 
responsible for delivery
of this message to the intended recipient(s), you are hereby notified that any 
dissemination,
distribution, or copying of this e-mail message is strictly prohibited. If you 
have received this message
in error, please immediately notify the sender and delete this e-mail message 
from your computer.

==============================================================================

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>