On Sep 19, 2006, at 12:25 AM, Michel Arboi wrote:
On Mon Sep 18 2006 at 14:46, Kostadin Kostadinov wrote:
> I am planning to scan with Nessus 3.0.3 from command line using Nmap
> port scan results but not portscanner of Nessus itself.
I'd like to know why so many people still prefer Nmap to the embedded
scanners.
Well, for me, the sheer configurability of it is the best part. Speed
isn't always what you are after, and just this morning, speed was the
enemy. We had a box that had countermeasures on it, and we had to
move slow to not trigger them. I didn't see an option for this on the
built in scanner.
It's not an everyday thing, by any means, but it is really good to
have when you need it. I also like the ability to control port scan
randomization and very fine grained control of the timing. Yes, I
know, most tech guys say "more knobs is better", but after using the
software for most of a decade, you might actually know what you are
doing with it on occasion ;)
Part of it, I imagine is because we really like nmap and there is a
mental "this is the best port scanner, because we've used this
forever and trust what it gives". I know I do not think of Nessus as
a port scanner.. I think of it as a vulnerability scanner. It's what
you run after nmap to get in there and see what the target really
presenting. After that, I'd go talk to folks in charge and start
running around in the boxes with Metasploit/Core imPact/Canvas.
So, the short of it is, that like some of the other features that
used to be in nessus (individual plugin upload directories, scheduled/
detached scans), we don't use it every day, but we do use it.
That a clear enough answer?
Doug Nordwall
Unix Administrator
EMSL Computer and Network Support
Unclassified Computer Security
Phone: (509)372-6776; Fax: (509)376-0420
The best book on programming for the layman is "Alice in Wonderland";
but that's because it's the best book on anything for the layman.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
