correlating vulnerability data

Unanswered Question
Aug 12th, 2008

I want to tune a standalone MARS and would like to incorporate NMAP and Nessus data to help eliminate some false positives. How do you upload this data to the device and the do the correlation?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
Farrukh Haroon Tue, 08/12/2008 - 18:18

The MARS has a built-in NESSUS but it can't be used to do manual scans. And since Nessus has recently changed their licensing scheme (got more commercial) it will be pretty difficult for Cisco to even provide this feature in the future. Have a look at this post:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=MARS&topic=Discussions&topicID=.2cc04749&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0e5a9

These are the Vulnerability Assessment devices supported by MARS:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/compatibility/local_controller/dtlc43x.html#wp75289

Please rate if helpful.

Regards

Farrukh

Actions

This Discussion