Nessus 5.0用户指南：最新版本与安装操作详解

3星 · 超过75%的资源需积分: 10 26 浏览量更新于2024-07-28 收藏 4.19MB PDF 举报

Nessus-5文档是Tenable Network Security, Inc. 出品的一本专业指导手册，专注于网络安全扫描工具Nessus的第五版用户指南。该文档于2012年6月12日发布，修订版本11，强调了最新版本的文档可以从官方网址<http://static.tenable.com/documentation/nessus_5.0_user_guide.pdf> 获取。该文档的主体内容分为几个部分： 1. **介绍**：这部分概述了Nessus在网络安全领域的重要性，以及它如何帮助企业和个人用户检测和管理网络漏洞。它可能会解释Nessus作为一款强大的漏洞扫描器，如何帮助提高网络安全性。 2. **标准与约定**：这部分介绍了文档中的术语、符号和格式规范，确保读者能够准确理解并遵循Nessus的使用方法。 3. **Nessus UI概述**：这一章节着重讲解Nessus图形用户界面（GUI）的结构和操作，包括如何导航、配置选项和查看扫描结果。 4. **支持平台**：文档列出了Nessus5.0兼容的操作系统和硬件平台，有助于用户确定其设备是否能支持Nessus的运行。 5. **安装**：这部分提供了详细的安装步骤，包括系统要求、安装程序的下载和安装过程，以及可能遇到的问题及解决办法。 6. **操作**：对Nessus的日常操作进行深入解析，包括如何连接到Nessus GUI，创建和管理扫描任务，以及执行安全扫描的过程。 7. **政策管理**：Nessus允许用户定义扫描策略（政策），这部分介绍了默认的扫描政策以及如何根据组织需求创建新的自定义政策。它涵盖了政策的通用设置和创建过程。 8. **创建新政策**：具体讲解了创建政策的步骤，包括设置目标主机、选择扫描模板、配置扫描参数以及设置报告和警报规则。 9. **Credentialed Scanning**：可能涉及使用Nessus进行身份验证扫描，以确保安全扫描的可信性和准确性。 10. **其他内容**：还可能包含关于Nessus的更新信息、常见问题解答、许可证管理和安全最佳实践等内容。 Nessus-5文档提供了一个全面的指南，旨在帮助用户充分利用Nessus进行有效且安全的网络审计，以保障网络环境的安全性。无论是初次使用者还是经验丰富的管理员，都能从中获取所需的知识和技能。

The “Network” frame gives options that better control the scan based on the target

network being scanned:

Option

Description

Reduce Parallel

Connections on

Congestion

This enables Nessus to detect when it is sending too many

packets and the network pipe is approaching capacity. If

detected, Nessus will throttle the scan to accommodate and

alleviate the congestion. Once the congestion has subsided,

Nessus will automatically attempt to use the available space

within the network pipe again.

Use Kernel Congestion

Detection (Linux Only)

Enables Nessus to monitor the CPU and other internal

workings for congestion and scale back accordingly. Nessus

will always attempt to use as much resource as is available.

This feature is only available for Nessus scanners deployed

on Linux.

The “Port Scanners” frame controls which methods of port scanning should be enabled for

the scan:

Option

Description

TCP Scan

Use Nessus’ built-in TCP scanner to identify open TCP ports

on the targets. This scanner is optimized and has some self-

tuning features.

On some platforms (e.g., Windows and Mac OS

X), selecting this scanner will cause Nessus to

use the SYN scanner to avoid serious

performance issues native to those operating

systems.

UDP Scan

This option engages Nessus’ built-in UDP scanner to identify

open UDP ports on the targets.

UDP is a “stateless” protocol, meaning that

communication is not done with handshake

dialogues. UDP based communication is not

always reliable, and because of the nature of UDP

services and screening devices, they are not

always remotely detectable.

SYN Scan

Use Nessus’ built-in SYN scanner to identify open TCP ports

on the targets. SYN scans are a popular method for

conducting port scans and generally considered to be a bit

less intrusive than TCP scans. The scanner sends a SYN

packet to the port, waits for SYN-ACK reply, and determines

port state based on a reply, or lack of reply.

SNMP Scan

Direct Nessus to scan targets for a SNMP service. Nessus will

guess relevant SNMP settings during a scan. If the settings

are provided by the user under “Preferences”, this will allow

Nessus to better test the remote host and produce more

detailed audit results. For example, there are many Cisco

router checks that determine the vulnerabilities present by

examining the version of the returned SNMP string. This

information is necessary for these audits.

Netstat SSH Scan

This option uses netstat to check for open ports from the

local machine. It relies on the netstat command being

available via a SSH connection to the target. This scan is

intended for Unix-based systems and requires authentication

credentials.

Netstat WMI Scan

This option uses netstat to check for open ports from the

local machine. It relies on the netstat command being

available via a WMI connection to the target. This scan is

intended for Windows-based systems and requires

authentication credentials.

A WMI based scan uses netstat to determine

open ports, thus ignoring any port ranges

specified. If any port enumerator (netstat or

SNMP) is successful, the port range becomes

“all”. However, Nessus will still honor the

“consider unscanned ports as closed” option if

selected.

Ping Host

This option enables the pinging of remote hosts on multiple

ports to determine if they are alive.

The “Port Scan Options” frame directs the scanner to target a specific range of ports. The

following values are allowed for the “Port Scan Range” option:

Value

Description

“default”

Using the keyword “default”, Nessus will scan approximately

4,790 common ports. The list of ports can be found in the

nessus-services file.

“all”

Using the keyword “all”, Nessus will scan all 65,535 ports.

Custom List

A custom range of ports can be selected by using a comma

delimited list of ports or port ranges. For example,

“21,23,25,80,110” or “1-1024,8080,9000-9200” are allowed.

Specifying “1-65535” will scan all ports.

You may also specify a split range specific to each protocol.

For example, if you want to scan a different range of ports

for TCP and UDP in the same policy, you would specify “T:1-

1024,U:300-500”. You can also specify a set of ports to scan

for both protocols, as well as individual ranges for each

separate protocol ("1-1024,T:1024-65535,U:1025"). If you

are scanning a single protocol, select only that port scanner

and specify the ports normally.

The range specified for a port scan will be applied to both TCP and UDP scans.

The “Performance” frame gives two options that control how many scans will be launched.

These options are perhaps the most important when configuring a scan as they have the

biggest impact on scan times and network activity.

Option

Description

Max Checks Per Host

This setting limits the maximum number of checks a Nessus

scanner will perform against a single host at one time.

Max Hosts Per Scan

This setting limits the maximum number of hosts that a

Nessus scanner will scan at the same time.

Network Receive

Timeout (seconds)

Set to five seconds by default. This is the time that Nessus

will wait for a response from a host unless otherwise

specified within a plugin. If you are scanning over a slow

connection, you may wish to set this to a higher number of

seconds.

Max Simultaneous TCP

Sessions Per Host

This setting limits the maximum number of established TCP

sessions for a single host.

This TCP throttling option also controls the

number of packets per second the SYN scanner

will eventually send (e.g., if this option is set to

15, the SYN scanner will send 1500 packets per

second at most).

Max Simultaneous TCP

Sessions Per Scan

This setting limits the maximum number of established TCP

sessions for the entire scan, regardless of the number of

hosts being scanned.

For Nessus scanners installed on Windows XP,

Vista, and 7 hosts, this value must be set to 19

or less to get accurate results.

剩余68页未读，继续阅读

chen_999876

粉丝: 33
资源: 91

Nessus 5.0用户指南：最新版本与安装操作详解

NESSUS6.3用户手册（中文版）

nessus部分官方资料

Nessus-中文操作手册.docx

nessus-plugins-2.0.10.tar.gz_NS-2_nessus plugi_nessus-_nessus-li

Nessus-4.2.1

nessus-downloader

Kali-Nessus-8.9.0-ubuntu_amd64

nessus-使用技巧

Kali-Nessus-8.10.0-debian6_amd64

python-nessus-client:Nessus REST API 的 Python 客户端

最新资源