Re: Nessus Scan against PIX ( Statefull firewalls )

Le Tue, 28 Aug 2007 18:47:46 +0530,
"hariprasad hariprasad" <harryhouse@gmail.com> a écrit :

> Nesssus scan on PIX firewalls

I'm not sure that this will be very useful. Anyway...

>  " *The remote host is considered as dead - not scanning* "

This comes from the ping_host plugin.

>    - Ports range -- 0-65535

0 is not a valid port number. Use 1-65535

>    - Port scanners -- all enabled

This will be slow. Choose the TCP scanner or the SYN scanner, this
should be enough.

> Need to customize anywhere since there are many  open ports at
> destination .

If you are sure that the IP are up, you may disable all ping methods in
the "preferences" of the ping_host script. Thus Nessus will scan all
IPs.
You can also try to enable all ping methods (although I don't think
that UDP ping would be efficient against a firewall) and/or use
"extended" as the port range for TCP ping. Keep in mind that all this
will considerably slow down the ping_host script; and this will be
inefficient if the firewall drops all incoming packets.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus