All right, welcome back, everyone.
This decision is about Nessa's scouter, and this Narcisco is the tune you would find when you work
with the multinational organization who make use of NASA's scanner for performing and scanning their
organization assets against the 100 different vulnerabilities as well.
This is how the dashboard really looks like.
And this is you can see there are multiple colors.
That's where you see the vulnerability listed one way or the other.
What do you see in the red?
That's the high priority for us.
Are you seeing the orange to medium now?
It's want to be discounting to of course, we know that and use biosecurity auditors and large business
like businesses.
Why a security auditor use it to serve for their customer.
So security auditors are the independent security auditor who works for the organization, who works
for different organizations.
OK.
So as I told you earlier, there could be internal auditor and external auditors as well.
All right.
So these these auditors, security auditors comes to your organization and they start scanning all the
organization and get to know that these are the weaknesses you have and everything.
Right.
So usually mid-sized businesses make use of it who cannot really afford the, you know, scanners for
four annual bases or so.
All right.
And the Skansen network on the entire network for our it is firewalls, everything.
And do the network.
You can get to know about the routers, Cisco, Juniper or any other routers that we have.
If that has anyone, nobody in the network as well, maybe the citizens, but maybe Cisco Arista's,
which is or maybe it's the extreme network to just maybe such as is usually in messages.
We won't be having much of the world, liberty or organization don't really go for those.
But in case of Manaslu, just like Cisco and Brandon switches, it can perform the scanning and get
get to know if there's any weaknesses.
There's any vulnerability in those are just switches.
All right.
And of course, the Web application.
So it could be our cloud based application hosted on the cloud online or it could be unprime internally
use application maybe for the Atari mess or maybe Internet portal application as a private application
as well.
We can scan those applications and we can get to know if we have any weaknesses of vulnerability.
Now, you know, no one ever debate based on oost stopped.
And one of the weaknesses is.
All right.
And along with finding them, one of them really is it is also useful for finding.
Finding is also ScanSource compliances as well.
Maybe for ISO twenty seven thousand one.
We can also make use it for Sock's for Arkadiusz Scan, which is medially for the payment organization,
to either process store credit card information.
They come, they have to they have to comply with Arkadiusz and they can make use of bcos plugins which
are available on the tool to scan for their different assets.
They can also make use of songs ISO twenty seven thousand one, you know, framework as well.
In fact, nest in this framework as well, TSF or other special publications as well.
So we'll talk about all those publications and in fact compliances.
We have discussed some of them in the past sections already.
And there's also give you an idea about some of the best practices.
So let's say if you have configured some timelike value on the router for maybe four, maybe maybe ICMP
barcodes or keep a lot of messages so it can recommend you.
OK, go for this much of a value, maybe this much of a millisecond or a 10 seconds or 15 second.
So the spool also helps you to go with some best practices and best practice configurations.
In fact, right now, the Nessus that enable the product comes with three licenses.
When it comes to these scanning, it could be Nessus.
Essentially this is free with which we can perform scanning for 16 IP addresses.
And this is for medially for testing so far learning as well.
If you want to test yourself in your home lab and just like the way you're going to be going to be doing.
You can start doing this, but you can only scan up to 16 IP addresses that could be hosted routers
such as anything but just 16 IP addresses Nessus professional.
It can scan for unlimited IP addresses and the scans for maybe and any any any application, no searches
or whatever it is.
It can scan for unlimited devices and enable that IO is majorly used for cloud hosted applications so
it can be hosted in the cloud.
It does actually hosted in the cloud and from the external server, Affinia itself will be scanning
our internal network.
So in that situation, we don't really have to get the license.
We don't really have to install it somewhere.
We don't have to take care of firewalls and other stuff and, you know, firewall blocking any ports
on all this stuff and being able to be sure that, you know, it has the scan process will be coming
in from the online, from the server, from the external public networks.
So we just have to play the cards with the external firewall only.
Right.
So these are the different licenses, although the the I'm the funnel cloud based application was very
seamless and pretty popular popularism.
But just to get started, we can you can you can make use of NASA's decision to try it out in the lab.
And this is professional is pretty much used by the security auditor, ASBA, to install it and get
started with the scanning and they get the report as well at the end.
Right.
So this is all about Nessus.
From the next session on what we'll be talking about, we can I will be actually getting started with
it.
All right.
So we'll see you then.