Contents
What does a Nessus scan look for?
Nessus is a remote security scanning tool, which scans a computer and raises an alert if it discovers any vulnerabilities that malicious hackers could use to gain access to any computer you have connected to a network.
What types of vulnerabilities are scanned by Nessus?
Nessus can scan these vulnerabilities and exposures:
- Vulnerabilities that could allow unauthorized control or access to sensitive data on a system.
- Misconfiguration (e.g. open mail relay)
- Denials of service (Dos) vulnerabilities.
- Default passwords, a few common passwords, and blank/absent passwords on some system accounts.
Why is Nessus so slow?
Information. Nessus scanners will periodically go into an ‘Initializing’ state which occurs when the scanner is performing routine self-maintenance. Most notably (and the most time consuming) is re-indexing and building the plugin database.
Can Nessus run multiple scans at once?
The maximum number of concurrent scans can be set to unlimited.
How many databases can I scan with Nessus?
The Nessus database compliance plugin now supports an infinite number of database credentials. Nessus users will now see one ∞ (infinity) symbol under the database Credentials tab. From there, you can configure any number of database credentials, all within a single scan policy.
How to run a Nessus compliance check on a database?
Nessus can be configured to log into the following database types and determine local security policy compliance: In general, Tenable recommends running a database compliance scan with a user with SYSDBA privileges for Oracle, sa or an account with sysadmin server role for MS-SQL, and DB2 instance user account for DB2.
How does Nessus work with tenable vulnerability management?
Nessus Agents are available with Tenable.io Vulnerability Management and Tenable On-Prem Agent Manager. Nessus Agents are an additional sensor type that can be used to increase visibility and provide flexibility to obtain scan results where traditional network scans might fail.
What do you need to know about Nessus professional?
Nessus Professional is designed to be used in a work setting. With the ability to scan unlimited IPs, a use anywhere, annual subscription, and advanced features such as configuration assessment, Live Results and custom reporting it is ideal for consultants, pen testers and security practitioners.