Well,
I have recently been using eEye UPNP scanner, because ISS is currently
giving a *ton* of false positives for UPNP. I also followed up with a
Nessus scan of the suspect hosts. Of all the UPNP flagged by ISS,
maybe 30% were legit.
It's always a good idea to be familiar with more than one tool for
percisely this reason.
On 3/28/06, Clemens, Dan <Dan.Clemens@healthsouth.com> wrote:
I actually prefer the Tenable line of products. They are the creaters
of Nessus which is the de facto standard of >>>>>>>>vulnerability
scanners on the Internet.
One cool thing you can do with some of the other products is use
multiple scanners, and then do corrilation of the vulnerability data
once it has been discovered.
Now I guess this is only cool if you want to use multiple scanners in
hopes that one scanner will catch things another didn't.
Out of curiosity - is anyone on the list actually utilizing multiple
scanners and corrilating the data within their risk assessment process
or is everyone that uses other peoples scanners utilizing just one
brand/vendor?
- Daniel Clemens
-----Original Message-----
From: sol@mail.fullertoninfosec.com
[mailto:sol@mail.fullertoninfosec.com]
Sent: Tuesday, March 28, 2006 7:29 AM
To: r@d
Cc: pen-test@securityfocus.com
Subject: Re: Canned audits
I actually prefer the Tenable line of products. They are the creaters
of Nessus which is the de facto standard of vulnerability scanners on
the Internet.
Tenable has created a number of tools to surround Nessus to offer (in my
view) a complete security audit solution.
Nevo is a Passive Vulnerability Scanner
Thunder is their Log Correlation Engine
Lightning is the management tool that pulls everything together in one
easy to manage console. From here you can create policies, run
distributed scans of your entire enterprise and then create reports as
generic or as explicit as you need.
From what I hear they are about to release a new version which includes
policies for compliance for all the major standards in the industry.
Sol
Quoting "r@d" <m2rad@gmx.net>:
Hi Rob,
There are quite a few tools around there to perform these kinds of
audits. I
personally like eEye Retina with REM Events Manager Console best. It
allows you to perform scheduled audits and have results posted in a
dashboard like way, or even have reports send by email.
I see you are especially interested in Wireless, therefor I think eEye
Retina is speficially fit for your needs.
Kind Regards,
Rajendra Soebhag
Technical Consultant - Trainer
CCA, CCEA, CCI
----- Original Message -----
From: "ROB DIXON" <rdixon@workforcewv.org>
To: <pen-test@securityfocus.com>
Sent: Friday, March 24, 2006 8:27 PM
Subject: Canned audits
Hi All,
We have had many audits in the past by 3 party vendors. My company is
finally interested in performing some of these audits in house and a
little more frequently than the annual 3rd party audits.
My question is, is there a software package, a "canned" audit that can
be performed? Basic info gathering questions regarding authentication
controls,
network documentation(how and where it is stored), question that
should be asked regarding wireless AP and other basic security
questions?
-Rob Dixon
Robert L. Dixon, CSO
CHFI A+
State of West Virginia's
West Virginia Office of Techonology
Infrastructure Applications
Netware/GroupWise Administrator
Telephone: (304)-558-5472 ex.4225
Email:rdixon@workforcewv.org
----------------------------------------------------------------------
-------
-
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security
penetration testing and vulnerability management needs. You have an
option to go with a managed service (Cenzic ClickToSecure) or an
enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@cenzic.com
----------------------------------------------------------------------
-------
-
----------------------------------------------------------------------
-------
-
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively
protect your applications from hackers. Cenzic has the most
comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go
with a managed service (Cenzic ClickToSecure) or an enterprise
software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@cenzic.com
----------------------------------------------------------------------
-------
-
------------------------------------------------------------------------
------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to
proactively protect your applications from hackers. Cenzic has the most
comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go
with a managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm
your results from other product. Contact us at request@cenzic.com
------------------------------------------------------------------------
------
-----------------------------------------
Confidentiality Notice: This e-mail communication and any
attachments may contain confidential and privileged information for
the use of the designated recipients named above. If you are not
the intended recipient, you are hereby notified that you have
received this communication in error and that any review,
disclosure, dissemination, distribution or copying of it or its
contents is prohibited. If you have received this communication in
error, please notify me immediately by replying to this message and
deleting it from your computer. Thank you.
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com
------------------------------------------------------------------------------
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com
------------------------------------------------------------------------------
