Nessus
[Top] [All Lists]

Re: Need assistance in testing Nessus

To: nessus@list.nessus.org
Subject: Re: Need assistance in testing Nessus
From: "George A. Theall" <theall@tenablesecurity.com>
Date: Mon, 20 Nov 2006 09:03:47 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
In-reply-to: <OF900C9BA9.A06EC20D-ON88257229.007B7B98-88257229.007B9E33@pffb.com>
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <OF900C9BA9.A06EC20D-ON88257229.007B7B98-88257229.007B9E33@pffb.com>
Sender: nessus-bounces@list.nessus.org
User-agent: Thunderbird 1.5.0.8 (X11/20061110)
On Fri, Nov 17, 2006 at 02:29:03PM -0800, Christina Davis wrote:

We have downloaded and installed the free version of Nessus 3 for Windows
to test in our environment. It looks like it would be a useful tool for
audit purposes. We are able to run port scans, but not retrieve windows
user information using the Windows: user management plug in family. We were
wondering if this is only available with the subscription, or are we
missing something here..

Nessus 3 for Windows is distributed with checks in the "Windows : User management" family. Even if you don't have a registered / direct feed, you can still use them. As Tim Doty already mentioned, make sure you provide credentials to log on to Windows machines remotely. With the Windows server, you do this by first adding a new policy and then editing the settings for credentials as discussed in our white paper here:

  http://www.nessus.org/documentation/nessus_credential_checks.pdf

Btw, note that while you can technically continue to use the download, you will not get any updates / new plugins that we write unless you register or purchase a direct feed. And our compliance checks are only available to direct feed customers.

George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>