That's our scanning platform to satisfy some of our PCI controls. Thirdly, we use Tenable.io as our PCI ASV. We have tailored, customized, secure baselines for about 40 technologies in the environment and we attest to them once a week: everything from common server versions, to a dozen or more database technologies, to middleware, etc. The second use case is baseline adherence. We've deployed agents on them and we do those scans daily. The caveat there is our mobile workstations, like our Macs or our Windows laptops. Twice a week, every week, we fully authenticate every host in the environment to perform authenticated scans. The first is enterprise vulnerability management through continuous scanning. Subscription can be canceled at any time and a prorated refund will be issued for the unused portion.We have three or four use cases. Monthly and Yearly Subscriptions are available. There is no limit on the number of devices being scanned. Licensing is based on the number of users that can access NVA at the same time. nessuss files are encrypted on load, and resides encrypted in our DB which is running in the Amazon Cloud.

This gives you 15 days to play around with the tool and get familiar with its capabilities.ĭemo Accounts provide example Composite Scans, Scan Comparisons, and an Admin and non-Admin user. To get a quick idea of whether the NVA would benefit your company's needs, create a Demo Account. Reports can be analyzed in tabular and graphic format and can also be exported to various file formats (.xls. Scan comparison allows an organization to determine and prove whether security measures are implemented promptly and efficiently, resulting in reducing the number of vulnerabilities. NVA allows individual Composite Scans to be analyzed and compared. nessus file produced by scanning a subset of devices can be later added to the Composite Scan. nessus files that are produced from multiple scanner runs.įulfilling the needs of an organization to run scans on numerous devices can be very time consuming.Ĭomposite Scans allow an organization to scan subsets of all their devices and start the analysis immediately, while the rest of the devices continue to be scanned.Įach. Network Vulnerability Analyzer (NVA) allows users of the Nessus scanner to combine multiple.

How to use nessus security center