Re: [Netpass-users] Nessus Test Script Feedback

[Jeff M. <jcm...@os...>]

On Tue, 2005-06-21 at 10:48 -0400, Don Rugh wrote:
> A configuration query -- 
> 
> 
> How many Nessus test scripts do NetPass admins typically run against
> client machines? Most of the 8000+? half? 80? as many as you can in
> two minutes? only those which have custom messages defined in NetPass?
> What basis is used to determine which ones are used?

to avoid irking the students, we keep it to a small set. originally
around 40 during fall'04. we trimmed it to 17 in spring'05. we just try
to hit the ones that cause us the most problems. 

we recognize that nessus doesn't have much value in the long run because
of personal firewalls (we don't issue instructions that students open
holes for the netpass server to scan via) so we are going to be relying
on passive monitoring (snort) with auto-quarantining to catch what
nessus can't.

jeff