topic Re: nessus automation? in Operating System - Linux

nessus automation?

Ratzie — Tue, 25 Oct 2005 09:32:58 GMT

is there a way with nessus to automate the scans lest say on a weekly basis?

I have been trying to find some examples, and I would like to scan a group of machines on a weekly basis.

Re: nessus automation?

B. Hulst — Tue, 25 Oct 2005 14:47:35 GMT

How about running it from the cronjob?

Regards,
Bob

Re: nessus automation?

Steven E. Protter — Tue, 25 Oct 2005 15:57:50 GMT

The latest version of nessus ported by HP should be able to be configured the way you want it.

Here are some possible leads on cron and non-cron methods on getting this task done.

http://www.securitydocs.com/library/2730

Setting it up as a server daemon:
http://nst.sourceforge.net/nst/docs/user/ch03s12.html

SEP

Re: nessus automation?

Senthil Prabu.S_1 — Wed, 26 Oct 2005 00:30:30 GMT

Hi,
There is one opensource tool called OSSIM that can do this for you. For more information, refer the home page & it can be downloaded from http://www.ossim.net/download.php. But, this need more knowledge on using tools like ACID or BASE.

Also, to make it easier, automation nessus can be done through cron jobs. Before automating using cron job, I would like to remind you of few points.

1. Nessus plugins automation can be done on daily basis.
2. You must enable "Local security checks using SSH" on the unix servers where you need to scan.

Moreover, you must manually interpret each time when scanning going on, to get the best result of Nessus.

For more clarification, you can get back to me anytime.

HTH,
Senthil Prabu.S