On Mon, 22 Dec 2003, Paul Johnston wrote:
> While performing an audit I've come across an interesting requirement:
> to be able to use Nessus against load balanced hosts. In this example it
> is an IIS cluster and the machines identify themselves with a "Machine:"
> header. This could be done reasonably efficiently using keep-alive
> connections, as the whole connection will be handled by the same machine.
I can think of some reasons why it will not work at all. (The use of 100s
of individual scripts by nessus for one.)
Then there is the issue of usability. Is is a standard identifier that
will work over multiple connections? Will it work on any IIS cluster?
It sounds nice at the start. But when you think about it a bit more it may
turn into a nightmare of epic proportions.
I think it would be nice if you (or someone else) can establish that this
is in fact a standard way that will work on any IIS cluster. Thinking
about new options is one thing but putting a lot of work in just for 1
cluster will not be very rewarding.
Hugo.
--
All email sent to me is bound to the rules described on my homepage.
[EMAIL PROTECTED] http://hvdkooij.xs4all.nl/
Don't meddle in the affairs of sysadmins,
for they are subtle and quick to anger.
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus
