I do similar. On an internal network this is an outline of what I did on a few /16 sized networks:
1. nmap ping scan the whole network. 2. Determine the plugins I'm going to use. 3. Create a .nessusrc file with the desired plugin information. 4. Run the scans one subnet at a time on the command line. Depending on the circumstances or the size of the network, use multiple systems to scan the network and automate with shell scripts. 5. Save everything into .nsr files, then merge them all together to create the final report. Frank -----Original Message----- From: Hugh Brown [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 27, 2001 9:36 AM To: 'Michael Scheidell'; [EMAIL PROTECTED] Subject: RE: Anyone run nessus on a large (500 host) network? Solaris 8 box so hardware shouldn't be an issue. I've taken to limiting my scans to 1 subnet at a time and running them with cron or by hand. I use nmap to generate a list of "active" hosts, chop it up with VI and feed that into nessus.
