Re: plugin 11475

["Peter Rosenthal" <voiperster@gmail.com>]

Does the sonicwall have any IPS features? Perhaps it is detecting the portscan/vulnerability scan and blocking the nessus server.

On 21/02/07, Ward Taylor <wardtayl@st-tel.net> wrote:

Hello and thank you for your reply.  I do not believe the hosts have crashed
because they are being tested in a live environment consisting of
site-to-site vpn associations that are not being disrupted during the
testing.  If one of the sonicwalls being tested were to crash, it would have
to be manually rebooted and that would cause an outage.  I am able to pass
traffic through them for the duration of a test.  They are all late models
with current firmware.
Thanks

-----Original Message-----
From: nessus-bounces@list.nessus.org [mailto:nessus-bounces@list.nessus.org]
On Behalf Of George A. Theall
Sent: Tuesday, February 20, 2007 8:10 PM
To: nessus@list.nessus.org
Subject: Re: plugin 11475

On Tue, Feb 20, 2007 at 09:05:14AM -0600, Ward Taylor wrote:

> When scanning a Sonicwall host using nessus for windows 3.0.5 several
> plugins such as 11475 and 10134 report that the host has crashed even
> though it does not.  Can something be done for this besides disabling
> the affected plugins?

How are you determining the host hasn't crashed? Can you still route
traffic through it during or shortly after a scan?

I don't have any direct experience with Sonicwalls, but looking back
through the list archives shows the devices have not proven very robust
when portscanned with Nessus or nmap in the past. Are you using an older
device?

George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus


--
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach CanIt if this mail (ID 16308257) is spam:
Spam:
http://spam.st-tel.net/canit/b.php?c=s&i=16308257&m=15b664f3ce50
Not spam:
http://spam.st-tel.net/canit/b.php?c=n&i=16308257&m=15b664f3ce50
Forget vote:
http://spam.st-tel.net/canit/b.php?c=f&i=16308257&m=15b664f3ce50
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus