Nessus 5.0 HTML5用户指南：全面解锁安全扫描

需积分: 16 146 浏览量更新于2024-07-26 收藏 3.21MB PDF 举报

Nessus 5.0 HTML5 User Guide是一份详细的文档，旨在帮助用户了解并充分利用Tenable Network Security公司的Nessus这款业界领先的网络扫描工具。该版本发布于2013年2月1日，修订至第6版，内容涵盖了Nessus用户界面的全面介绍、安装过程、操作指南以及高级功能的详细配置。 1. **标准与约定**：在指南的开头，介绍了文档遵循的标准和约定，确保读者对文档结构和术语有清晰的理解。 2. **Nessus用户界面概述**：用户界面部分着重于Web基础，说明了Nessus是如何通过浏览器访问的，并且强调其作为一款在线工具的特性。 3. **支持平台**：提供了Nessus运行所需的操作系统平台列表，确保用户在不同环境下的兼容性。 4. **安装**：这部分包括安装步骤，指导用户如何下载、配置和设置Nessus，确保顺利启动使用。 5. **操作概述**：用户可以通过浏览指南学习如何连接到Nessus图形用户界面（GUI），管理扫描政策，以及创建新的扫描任务。 6. **政策管理**：政策是Nessus的核心，包括默认策略的介绍，以及如何创建、复制和导出政策，以适应不同的扫描需求。 7. **插件管理**：插件是扫描工具的核心组成部分，指南解释了如何选择和使用适合特定目标的扫描插件，以检测网络漏洞。 8. **偏好设置**：用户可以自定义Nessus的行为，如扫描速度、结果查看方式等，以优化扫描效率。 9. **结果分析**：结果浏览、报告过滤、比较（Diff Results）以及上传/下载（Export）功能的详细说明，帮助用户深入理解扫描结果并进行后续处理。 10. **移动设备支持**： Nessus也考虑到了移动设备的用户体验，提供了移动设备上的扫描管理和结果查看功能。 11. **安全中心集成**：介绍了如何配置Nessus与Security Center协同工作，以便整合漏洞管理和风险管理流程。 12. **防火墙和扫描偏好**：对于主机级防火墙的处理和扫描设置进行了详尽的解释，确保扫描过程不会被防火墙阻断。 13. **附加信息与联系**：最后，指南提供了进一步的信息来源，以及鼓励用户向Tenable Network Security提交反馈和建议，促进产品不断改进。这份用户指南为Nessus 5.0的使用者提供了丰富的资源，从基础操作到高级功能配置，确保他们能够有效地利用这个强大的网络安全扫描工具进行风险评估和漏洞管理。

On some platforms (e.g., Windows and Mac OS X), selecting this

scanner will cause Nessus to use the SYN scanner to avoid serious

performance issues native to those operating systems.

Nessus SYN scanner

Use Nessus’ built-in SYN scanner to identify open TCP ports on the targets. SYN

scans are a popular method for conducting port scans and generally considered to be

a bit less intrusive than TCP scans. The scanner sends a SYN packet to the port, waits

for SYN-ACK reply, and determines port state based on a reply, or lack of reply.

The “Port Scan Range” option directs the scanner to target a specific range of ports. The following values are allowed:

Value

Description

“default”

Using the keyword “default”, Nessus will scan approximately 4,790 common ports. The

list of ports can be found in the nessus-services file.

“all”

Using the keyword “all”, Nessus will scan all 65,535 ports.

Custom List

A custom range of ports can be selected by using a comma delimited list of ports or

port ranges. For example, “21,23,25,80,110” or “1-1024,8080,9000-9200” are allowed.

Specifying “1-65535” will scan all ports.

You may also specify a split range specific to each protocol. For example, if you want

to scan a different range of ports for TCP and UDP in the same policy, you would

specify “T:1-1024,U:300-500”. You can also specify a set of ports to scan for both

protocols, as well as individual ranges for each separate protocol ("1-1024,T:1024-

65535,U:1025"). If you are scanning a single protocol, select only that port scanner

and specify the ports normally.

The rest of the options available:

Option

Description

Consider Unscanned Ports

as Closed

If a port is not scanned with a selected port scanner (e.g., out of the range specified),

Nessus will consider it closed.

Nessus SNMP Scanner

Direct Nessus to scan targets for a SNMP service. Nessus will guess relevant SNMP

settings during a scan. If the settings are provided by the user under “Preferences”,

this will allow Nessus to better test the remote host and produce more detailed audit

results. For example, there are many Cisco router checks that determine the

vulnerabilities present by examining the version of the returned SNMP string. This

information is necessary for these audits.

Nessus UDP Scanner

This option engages Nessus’ built-in UDP scanner to identify open UDP ports on the

targets.

UDP is a “stateless” protocol, meaning that communication is not done

with handshake dialogues. UDP based communication is not always

reliable, and because of the nature of UDP services and screening

devices, they are not always remotely detectable.

netstat portscanner (SSH)

This option uses netstat to check for open ports from the local machine. It relies on

the netstat command being available via a SSH connection to the target. This scan

is intended for Unix-based systems and requires authentication credentials.

Ping the remote host

This option enables the pinging of remote hosts on multiple ports to determine if they

are alive.

Netstat Portscanner (WMI)

This option uses netstat to check for open ports from the local machine. It relies on

the netstat command being available via a WMI connection to the target. This scan

is intended for Windows-based systems and requires authentication credentials.

A WMI based scan uses netstat to determine open ports, thus ignoring

any port ranges specified. If any port enumerator (netstat or SNMP) is

successful, the port range becomes “all”. However, Nessus will still honor

the “consider unscanned ports as closed” option if selected.

Nessus TCP Scanner

Use Nessus’ built-in TCP scanner to identify open TCP ports on the targets. This

scanner is optimized and has some self-tuning features.

On some platforms (e.g., Windows and Mac OS X), selecting this

scanner will cause Nessus to use the SYN scanner to avoid serious

performance issues native to those operating systems.

Nessus SYN Scanner

Use Nessus’ built-in SYN scanner to identify open TCP ports on the targets. SYN

scans are a popular method for conducting port scans and generally considered to be

a bit less intrusive than TCP scans. The scanner sends a SYN packet to the port, waits

for SYN-ACK reply, and determines port state based on a reply, or lack of reply.

The “Performance” menu gives options that control how many scans will be launched. These options are perhaps the

most important when configuring a scan as they have the biggest impact on scan times and network activity.

Option

Description

Max Checks Per Host

This setting limits the maximum number of checks a Nessus scanner will perform

against a single host at one time.

Max Hosts Per Scan

This setting limits the maximum number of hosts that a Nessus scanner will scan at

the same time.

Network Receive Timeout

(seconds)

Set to five seconds by default. This is the time that Nessus will wait for a response

from a host unless otherwise specified within a plugin. If you are scanning over a slow

connection, you may wish to set this to a higher number of seconds.

Max Simultaneous TCP

Sessions Per Host

This setting limits the maximum number of established TCP sessions for a single host.

This TCP throttling option also controls the number of packets per

second the SYN scanner will eventually send (e.g., if this option is set to

15, the SYN scanner will send 1500 packets per second at most).

Max Simultaneous TCP

Sessions Per Scan

This setting limits the maximum number of established TCP sessions for the entire

scan, regardless of the number of hosts being scanned.

For Nessus scanners installed on Windows XP, Vista, and 7 hosts, this

value must be set to 19 or less to get accurate results.

Reduce Parallel

Connections on

Congestion

This enables Nessus to detect when it is sending too many packets and the network

pipe is approaching capacity. If detected, Nessus will throttle the scan to

accommodate and alleviate the congestion. Once the congestion has subsided,

Nessus will automatically attempt to use the available space within the network pipe

again.

Use Kernel Congestion

Detection (Linux Only)

Enables Nessus to monitor the CPU and other internal workings for congestion and

scale back accordingly. Nessus will always attempt to use as much resource as is

available. This feature is only available for Nessus scanners deployed on Linux.

The “Advanced” menu further defines options related to how the scan should behave:

Option

Description

Safe Checks

Safe Checks will disable all plugins that may have an adverse effect on the remote

host.

Silent Dependencies

If this option is checked, the list of dependencies is not included in the report. If you

want to include the list of dependencies in the report, uncheck the box.

Log Scan Details to Server

Save additional details of the scan to the Nessus server log (nessusd.messages)

including plugin launch, plugin finish or if a plugin is killed. The resulting log can be

used to confirm that particular plugins were used and hosts were scanned.

Stop Host Scan on

Disconnect

If checked, Nessus will stop scanning if it detects that the host has become

unresponsive. This may occur if users turn off their PCs during a scan, a host has

stopped responding after a denial of service plugin, or a security mechanism (e.g.,

IDS) has begun to block traffic to a server. Continuing scans on these machines will

send unnecessary traffic across the network and delay the scan.

Avoid Sequential Scans

By default, Nessus scans a list of IP addresses in sequential order. If checked, Nessus

will scan the list of hosts in a random order. This is typically useful in helping to

distribute the network traffic directed at a particular subnet during large scans.

Designate Hosts by their

DNS Name

Use the host name rather than IP address for report output.

The range specified for a port scan will be applied to both TCP and UDP scans.

Credentials

The “Credentials” tab, pictured below, allows you to configure the Nessus scanner to use authentication credentials

during scanning. By configuring credentials, it allows Nessus to perform a wider variety of checks that result in more

accurate scan results.

The “Windows credentials” drop-down menu item has settings to provide Nessus with information such as SMB account

name, password, and domain name. Server Message Block (SMB) is a file sharing protocol that allows computers to

share information transparently across the network. Providing this information to Nessus will allow it to find local

information from a remote Windows host. For example, using credentials enables Nessus to determine if important

security patches have been applied. It is not necessary to modify other SMB parameters from default settings.

剩余68页未读，继续阅读

wxw512181558

粉丝: 0
资源: 1

Nessus 5.0 HTML5用户指南：全面解锁安全扫描

Nessus 4.2 用户手册

Nessus 6.3 中文用户手册 PDF 格式

Nessus4.2中文用户指南：扫描与安全审计

Nessus合规检查参考指南

Nessus5.0用户指南：安全扫描与管理

nessus使用指南

nessus nessus

Nessus5.0安装和配置指南

nessus用户手册

Nessus 6.0 用户指南：新特性与操作详解

最新资源