Mike
--
Do you
have the source (tar.gz) files for version 0.20 of Inprotect available? I am
having problems downloading them from the sourceforge
website.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 20, 2005 11:15 AM
To: Kaplan, Andrew H.
Subject: RE: Setting Up Automated Scans
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 20, 2005 11:15 AM
To: Kaplan, Andrew H.
Subject: RE: Setting Up Automated Scans
Check out the Inprotect site. It is GPL (i.e. free) and uses a MySQL database as well as the Nessus and NMap engines. It will allow you to use a web front end (apache) for setting everything up and viewing the results. You can schedule your scans at intervals and email the results. The reports are displayed in either PDF or HTML. Finally, if you want to modify the code, it is PHP and thus can be modified to suit any specific need you may have that is not covered.
Since these things are already written, it may save you the time you would devote to development and configuration.
Mike
"Kaplan, Andrew H." <[EMAIL PROTECTED]> 01/20/2005 11:06 AM
"'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> "'[email protected]'" <[email protected]> RE: Setting Up Automated Scans
Hi there --
My plan for the end-result was to have it in html format with the pies and graphs. I would then access the output via a web browser preferably from a remote host. To accomplish this, my idea
is to install Apache 1.3.31 with mod_ssl 2.8. What do you think?
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 20, 2005 10:49 AM
To: [email protected]; Kaplan, Andrew H.
Subject: Re: Setting Up Automated Scans
There are a myriad of methods to accomplish something like this:
You can start as simple as using a repeating cron job that runs a shell script to fire off a command line Nessus scan.
You can go to the other end of the spectrum and look into products/solutions like Inprotect (http://www.inprotect.com) which uses a web front-end and a database and will run the scans and create reports.
A better question to consider is, "What should your end-result look like and what do you intend to do with it?"
Mike
----------------------------------------------------
Mike Sleeper CISSP, CCSE, CCFS
----------------------------------------------------
************* DISCLAIMER ***********************************
The above comments are my own and do not
necessarily represent those of my employer or
contractor. Any information or advice provided by
me shall be given under the "caveat emptor" principal.
*****************************************************************
"Kaplan, Andrew H." <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]01/20/2005 10:32 AM
[email protected] Setting Up Automated Scans
Is there a way to set up non-interactive, or automated scans of multiple hosts?
If so, how is it done? Thanks.
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
