Security Basics mailing list archives
Re: Automatic remediatio​n using Nexpose
From: Curt Purdy <infosysec () gmail com>
Date: Tue, 4 Oct 2011 13:00:53 -0400
Nexpose is a vulnerability assessment tool, it does work hand-in-hand with Metasploit for pen-testing verification of the vulnerablity, but there is no automatic remediation tool to use with that. The closest thing to that would be NAC with a remediation VLAN, but that is for clients, not servers that you would normally be talking about with Nexpose/Metasploit and VAs in general. When it gets right down to it, sometimes you just have to get your hands dirty and start banging away at a keyboard. At least Rapid7 has done a lot of the work for you by eliminating false-positives, which is the #1 problem/headache/time-waster with VAs. Curt Purdy CISSP GSNA GSEC MCSE+I CCNA infosysec () gmail com purdy () tecman com On Tue, Oct 4, 2011 at 3:17 AM, <coenemichel () gmail com> wrote:
Hello all, We arecurrently testing the Nexpose software. The main problem with this software isthat there is no automatic remediation. Is there anyone that uses/knowssoftware by which we can automatically deploy patches to our workstations/server using the report coming from Nexpose. Best regards, Michel ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- Automatic remediatio​n using Nexpose coenemichel (Oct 04)
- Re: Automatic remediatio​n using Nexpose Todd Haverkos (Oct 04)
- Re: Automatic remediatio​n using Nexpose Curt Purdy (Oct 04)
- Re: Automatic remediatio​n using Nexpose Michel Coene (Oct 04)
- Re: Automatic remediatio​n using Nexpose Robert Musser (Oct 04)
- Message not available
- Automatic remediatio​n using Nexpose Reece Mills (Oct 05)
- Re: Automatic remediatio​n using Nexpose Mel Chandler (Oct 07)
- Re: Automatic remediatio​n using Nexpose Curt Purdy (Oct 04)
- Re: Automatic remediatio​n using Nexpose Todd Haverkos (Oct 04)
- <Possible follow-ups>
- Re: Re: Automatic remediatio​n using Nexpose coenemichel (Oct 05)
- Re: Automatic remediatio​n using Nexpose Ukpong Ukpong (Oct 05)