[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [ISSForum] Diffs on InetScanner in SiteProtector



The easiest way to compare scan results is to use the baseline option:
You isolate the previous scan using the time filter, baseline it, than
look at the new results. All that is new will be red and all that is
fixed will be blue; should a vulnerability have disappeared completely
you won't see it at all (instead of being blue).

I hope it helps.

Jean Paul

-----Original Message-----
From: issforum-bounces@xxxxxxxxxxxxxxxx On Behalf Of Dan Widger
Sent: Tuesday, November 30, 2004 9:44 PM
To: issforum@xxxxxxxxxxxxxxxx
Subject: [ISSForum] Diffs on InetScanner in SiteProtector

I think that a natural analysis function of a network mapper tool is to
compare the current state of a network with a previous benchmark.

 

Based on that, I'm wondering if there is already a function built into
SiteProtector (or even into the Inet Scanner tool) which would compare a
previous scan result with a current scan result, and show the diff's
(differences) between a previous scan, and a current scan?  Is this just
a custom (Crystal) report, or is there some other tools or process to
accomplish this?

 

Further, has anyone had any significant success in creating other
reports in SiteProtector that address the results found in Inet Scanner
vulnerability scans?  I'm looking for more advanced reporting
functionality, particularly in regards to presenting scanning &
vulnerability information.  I'd really like a report that would list all
computers that have a given TCP or UDP port active.  

 

Any help would be appreciated.

 

Dan Widger

Security Engineer

_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.



_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.