Let us continue with vulnerability assessment in Nessus, in the last video, we saw how to download
and configure the Nexus and in this video we will start creating a Nexus policy.
So in this video, you will learn the overview of Nexus.
We will learn how to create a network policy and configure a network policy for scanning different types
of scanning on target revealed that open port and services might be running on the target.
Next step.
Should we want to be scanning to detect possible vulnerabilities of the system in a targeted network?
How to launch Nessus after installing the Nessa's?
You may get a client in the form of the default web browser.
Open that on your desktop and login with the credentials you had given at the time of installing Nessus.
Once you sign in, it will load Nessus.
This lab will give you a Real-Time experience.
How security experts use this tool for performing penetration tests and they're scanning.
So these are your concerting if you want to change your password, you can change it from here voluntarily.
Scanning is a type of security assessment activity performed by security professionals on the home network.
It helps in finding possible network vulnerabilities.
So let us start creating a network policy.
If you have faced any problems in downloading and installing Nessa's, you can ask us during the mentorship
sessions.
Now.
Let us start creating a network policy.
These are the types of scanners and these are the details about Nessus, which we are using license
utilization, Verizon software update.
You can update it from here.
And this is the master password proxy servers.
There's a lot of this is really a wonderful tool which is used by most of the penetration testers and
security experts.
It also uses in auditing and much more.
So you can see that Necessar only used 20 M.V. of memory and alone is right now zero.
So let us start creating the first Wallasey so you can see the new policy button.
Click there.
And there are numerous policies available.
Host Discovery, Basic Networks and Advanced Policy Advanced Dynamic Scan Malware to scan credentialled
patch audit for application tests.
So just by seeing this, you can see the overuse of Nessa's and how Nessa's is important in doing Baptist's.
To add a new policy, click the policies button and in the resources meaning will appear the policies.
So the Nessa's policy window will open and then you have to create a new policy.
The screen on which you right now you're seeing is known as the policy template, the policy general
settings with basic policy settings.
I will appear after we will select a certain policy.
For this lecture, we are going to select the advance gang policy.
In advance, can the policy general say things will appear with basic setting types, specify the policy
name in the name field, and give a description about the policy?
If you want, I will give it a description and the name of advanced networks and policy.
The description field is used at the time of actual penetration testing to specify the functionalities
of this particular policy.
I won't be wasting much time in giving the description you can give a description whatever you want,
or you can just leave the field blank.
Any changes to the NSA scanner configuration of all the NSA's users?
So make sure you edit these options very carefully in the settings field select host or discovery from
the Discovery dropdown button and turn off the pinger remote option.
You have to turn it off.
Do not turn it on the port scanning sitting type and check the verify DCP Open ports found by the local
port enumerators.
You have to turn it on and leave the other filled with default options.
Go to service discovery and keep it all it is in the settings.
Feel select the report and do not alter any options in this setting.
Type in the setting will select advanced and the policy generally settings with advanced settings.
I believe you said the values of max number of concurrent DCP Sessions, Bornhorst and max number of
concurrent TCP bioscan to Unlimited, as you can see, and doing it on the screen now to configure the
credentials of new policy, click the credentials tab.
The policy credentials window will appear with the Windows credentials.
It is displayed, as you can see on the screen.
If you want this policy to be hidden from outsiders, you can specify a username and password.
But make sure that you remember this password.
We are done here, 80 percent of the job is almost done now to select the required plugins, click the
plug in step.
But for this scan, we won't require any plug ins.
But if you are really interested, you can go to Tenebrae dot com and read more about plug ins.
These plug ins are really essential while scanning different websites and databases.
As you can see, Cisco plug INS databases and Musong plug ins and much more.
In this way you can select the required plug ins, but for this scan you do not require any plugin.
So please click the enable buttons.
I will now click the disable button to disable all of the policies and plugins.
So now what you have to do after this, you have to just click the button to save everything.
A policy saved successfully pop up will appear and the policy is added in the policy window, as you
can see on the screen right now.
Now, look, the scans to open the MRI scan window and in the next lecture, we will see how to create
a new scan.
And the user defined section, we will see the scan or the policy which we have just created.
There you go.
You can see advanced network policy.
And here we have to create a new scan by naming the new scan and Advanced Networks scan description.
I will just give them a scan.
And there we go.
We are to enter the target IP address and Nessus will start scanning the website for the target IP address
for their abilities.