Alvin Oga wrote:
> 
> <rant>
> doing a portscan like nessus/nmap is sorta worthless ???

Uhm... I'm not sure I'd call nessus a port scanner?

Although: yes, a host-based scanner has far greater 
possibilities in knowing which version of a certain 
executable/lib/dll is vulnerable than a network-
based one. Although network-based ones do have their
use aswell -- especially when your boxes are spread
across different administrative domains, and you can't
get the dim-bulb sysadmin of department X to understand 
that breaches there can affect the entire organization.

-- 
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 �RNSK�LDSVIK, Sweden
Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50       WWW: http://www.clavister.com

"Senex semper diu dormit"
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management (unsubscribe, get/change password, etc) Please go to:
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to