On Thu, 10 Jun 2004, Naman Latif wrote: > Hi, > We will be using Nessus to Scan a Web (HTTP and HTTPS) Server running on > non-standard ports. > Is there something that needs to be configured in Nessus to let it know > the HTTP and HTTPS ports ? > Or will it detect automatically and how ?
Nessus should automatically find the servers and test them - no special configurations required. Initially Nessus does a port scan (here it will find your non-standard ports open), then it will 'fingerprint' each open port (here it will identify there are web servers running on the ports). Thus, it should work for you. This is one of the great things about Nessus. Say, for example, you have an SMTP server running on port 80. Instead of making the assumption that port 80 == HTTP, Nessus will instead find port 80 open, fingerprint it, and determine it is an SMTP server. Thus, "properly" checking the service regardless of which port it is running on - privilidged, standard, or otherwise. ~Jay -- .. .. Jay Jacobson .. Edgeos, Inc. - 480.961.5996 - http://www.edgeos.com .. .. Network Security Auditing and .. Vulnerability Assessment Managed Services .. _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
