correlating vulnerability data

Unanswered Question
Aug 12th, 2008
User Badges:

I want to tune a standalone MARS and would like to incorporate NMAP and Nessus data to help eliminate some false positives. How do you upload this data to the device and the do the correlation?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
Farrukh Haroon Tue, 08/12/2008 - 18:18
User Badges:
  • Red, 2250 points or more

The MARS has a built-in NESSUS but it can't be used to do manual scans. And since Nessus has recently changed their licensing scheme (got more commercial) it will be pretty difficult for Cisco to even provide this feature in the future. Have a look at this post:


http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=MARS&topic=Discussions&topicID=.2cc04749&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0e5a9


These are the Vulnerability Assessment devices supported by MARS:


http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/compatibility/local_controller/dtlc43x.html#wp75289


Please rate if helpful.


Regards


Farrukh

Actions

This Discussion