Re: safe plugins
Ron Gula <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
David Liss wrote: > For some reason the default setting of a fresh 3.2.1 installation (WinXP) doesn't have the "Databases" plugins checked by default, nor "CentOS Local Security Checks". Are these disabled because they are unsafe on production machines? > > Related to this, "Denial of Service" plugins are checked (enabled) by default, even though the installation guide advises against these checks on production machines. > Hi David, We choose to ship Nessus with few default policies because you can scan with so many different combinations of features enabled. The intent with the Nessus Client was for Nessus users to build and save policies that were relevant to their environment and desired testing methods. Ron Gula Tenable Network Security _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus