|
We're
working out a compromise with our server administrators who only want Nessus
scans run on weekends. We'd rather during off-peak times, but could settle
for scheduling Nessus scans during standard maintenance windows like Tyran
suggests.
Another option is to run initial scans on a server
during a standard maintenance window, but do rescans simply on off-peak times
for the server. Has anyone had servers that initially scanned ok, but
rebooted during rescans later on?
Yeah, I think it’s
still a necessary evil. Doing it during a standard maintenance window
would definitely be good. At least this way, you’ll no if your machines
are susceptible to certain DOS attacks.
-----Original
Message-----
From: Gilbert,
Austin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 06, 2002 10:03
AM
To: 'Mark
Snellgrove'
Cc:
'[EMAIL PROTECTED]'
Subject: RE: Nessus reboots HP - UX 10.2
systems during scan?
Quite
often, the port scan itself is the cause of the reboot, not a plugin.
I'm not saying it's the case here, however, I have had much of the same
experience. We scan our servers during the standard outage time becuase
of this very issue.
-----Original
Message-----
From: Mark
Snellgrove [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 06, 2002 8:50
AM
To:
[EMAIL PROTECTED]
Subject: Nessus reboots HP - UX 10.2
systems during scan?
We
recently scanned a couple of HP-UX 10.2 servers using Nessus and these
servers apparently rebooted. Needless to say, the sys admin is now
hesitant when we approach him with plans to scan other servers of
his.
We had "Safe Checks Only"
enabled, yet these servers still rebooted. Can anyone point me to
where I can find out which plug-in would cause the server to reboot?
I've searched the list-serv, but only came up with references to
installation problems with Nessus and HP-UX 10.2.
We also had the same problem
when we scanned our old switchgate terminal servers. Would it have
been the same plug-ins that rebooted these devices as
well?
Thanks,
Mark
Nessus
Newbie
IMPORTANT NOTICE:
This message is intended only for the use of the
individual or entity to which it is addressed and may contain information that
is privileged, confidential and exempt from disclosure under applicable law.
If you have received this message in error, you
are hereby notified that we do not consent to any reading, dissemination,
distribution or copying of this message. If you have received this
communication in error, please notify the sender immediately and destroy the
transmitted information.
|
