topic Re: HP Switches Vulnerability Assestment in Security e-Series

HP Switches Vulnerability Assestment

flodnar31 — Tue, 20 Sep 2016 09:19:50 GMT

Hi Guys

I'm New in handling HP Switches, we recently deployed new Hp switches. The company required a Vulnerability Assestment on the Network devices. We have nipper scanner 0.12.6 but it seems like this is only for cisco switches.

Can you recommend best and tested Vulnerability Assestment and security Audit tools I can use for HP Switches?

Both Open source and Licensed is Okay.

Can you help me out on this guys?! Thanks a lot!! :)

Re: HP Switches Vulnerability Assestment

Ian Vaughan — Tue, 20 Sep 2016 21:07:15 GMT

Hello,

I would:

Work through the "hardening" guide for the particular platform - for example, Comware has a "fips-mode enable" configuration macro that turns off the insecure services and the more vulnerable ciphers etc.
Load up a linux box with OpenVAS (free) or Nessus (paid), download the latest vulnerability packs, and scan the nodes for security holes.

Nipper seems to be a configuration comparison tool.There isn't a direct equivalent for HPE/Aruba but...

If you need to do a configuration audit on some of the HPE / Aruba switches there are pre-built scripts / tests (such as ones for PCI-DSS compliance) built into the iMC Standard Edition Management Platform. This is a purchasable licensed product but you can get a free trial for 60 or so days and test drive it to see if it does what you need.

Kudos and Solved buttons help others find useful posts - don't be shy - you don't even need to be the original poster - give us a click. :-D

Thanks

Ian

Re: HP Switches Vulnerability Assestment

Ian Vaughan — Tue, 20 Sep 2016 23:25:51 GMT

Hello (again),

Regarding OpenVAS vulnerability scanner, if you have a Linux box that is "docker" capable a Very Nice Man has containerized the OpenVAS application so that you can just do a "docker pull <package>" to install it :-O

I've just run it against my VSR installation so I now need to go and have a look at the SSH version - seems to work a treat

Hope that helps

Thanks

Ian

Re: HP Switches Vulnerability Assestment

flodnar31 — Thu, 13 Oct 2016 14:10:56 GMT

Thanks Ian. We'll try your recommendations for now

Appreciate the great help.