Re: Distributed Vulnerability Scanners

(since a lot of people are doing shameless plugs, I thought I'd jump in)

On Thu, Mar 06, 2003 at 03:33:38PM -0800, Kohlenberg, Toby wrote:
> I've heard a couple people mention scanning services that offer

This is exactly what you'll get with Lightning (distributed Nessus), from Tenable Network Security (www.tenablesecurity.com)

• Each proxy defines which Nessus is in charge of which subnet (you can have multiple Nessuses by subnet, they'll split the work among them)
• Proxies can be chained, so you can go everywhere in your network (if you have NAT within NAT for instance).
• Plugins updates are automatically pushed to the nessusds - no need for them to have internet connectivity. If you want a solution which is completely disconnected from the internet, you can manually transfer the new plugins to the top proxy, and they'll be pushed from there.

And in addition to that, you also get IDS correlation.

• Renaud

-- 
Renaud Deraison
The Nessus Project
http://www.nessus.org

----------------------------------------------------------------------------

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html