^ So, you reckon I should go with CentOS or Red Hat for Nessus then?
Printable View
^ So, you reckon I should go with CentOS or Red Hat for Nessus then?
What is your question? The answer depends on your requirements and if you already have a Red Hat support license. The operative differences between CentOS and RedHat is that CentOS is a true "free" and community supported version of whatever current version of RedHat is released.
Do you already have RedHat or CentOS installations currently, or do you have none and have no clue what you are doing?
Are you "toying" with Nessus or are you actually looking at a mission-critical installation? As before, your criteria and more information is needed before being able to give you a clear answer.
I'd install the VM virtual appliance as a reference install, regardless, first.
I played with Nessus a couple of years back and I'm waiting for our treacle-like procurement department to finish buying an enterprise license, after which I'll be deploying it.
So I have a complete choice of what to run it on and can buy anything if necessary.
I haven't touched Linux for work for a few years, so if you have any suggestions to save me fucking about evaluating, they'd be welcome.
By the way, you do know that signature is a total mess, don't you?
It looks like this:
Actually it looks OK when I quote it, but on your posts there are lots of [URL= and the like....Quote:
My personal view on 9/11 & DNA evidence. Another decent resource. and another. What's a Proofwreck?
10 characteristics of Conspiracy Theorists 25 Rules of Disinformation
--
"If you don't care about the accuracy of what you are saying here,
it hints at just how much you care about the accuracy of anything you say." -Hazz
Thanks for the head's up on the signature. Take it up with DD, who apparently has no clue how to set up permissions on vbulletin, and who's behind this (banned me from some issue or news thread because *he* got his feathers ruffled posting and admining drunk, as usual).
I prefer CentOS simply because I can deploy it without needing to buy a RH support and upgrades license (ie what makes their automated updates system work). CentOS is virtually the same (yay, for true open source) except their repositories aren't locked down, and, in my opinion, are a bit better curated.
Then again, you also get support plans with RH (separate), but I have found those lacking for the issues I have had. Most issues I ended up tracking down by googling hours before RH support got back to me - so I'm saving myself the $$$ and using CentOS. Basically if you can handle an install, and know how to recompile a kernel, you're better served (IMO) by CentOS. The Nessus installer seems self-configuring and self-installing and aware of different flavors of installations - so it really comes down to how familiar you are with it, if you have someone on staff to deal with Linux, or if you want to hire a contractor to set it up and bring you up to speed (and yes, shameless plug: it's one of the things I do, despite being "tainted" by the foul Apple stench).
Like I said, usually best start is to set up a VirtualBox install and install a VM virtual appliance if the vendor offers it (Nessus does), as well as do the same to play round with a CentOS install. I prefer VirtualBox, because it's free, and does a great job running on virtually any host.
Yeah, the .sig really sucks - considering replacing it with a nice comment about D's incompetence in terms of settings perms, but then I probably get banned for good - he is quite a bit sensitive for a thin little guy, when drunk - which he is, apparently, a lot.
Do I really need to compile a kernel just to install Linux and Nessus?
Last time I did it I don't recall having to do that.
Anyway, I have a spare machine so I can play around with it and try and revive the distant memories....
I notice they've included LibreOffice in this release of CentOS, Buttplug will be so upset, he hates it.
:)
Installation does not require recompiling a kernel - I threw that in as a technical qualifier - ie if you know how to compile a Linux kernel, then you should have the proper qualifications to handle and installation, configuration and tweaking and fine tuning.
Sorry if I gave the wrong impression.
Depending on the final installation and configuration, recompiling with minimal needed features and modules is always a good idea, though less so nowadays with the modular kernels and dynamic modules. I find a monolithic kernel convenient fr appliances, though. Just tends to make the box more solid, IMO - again.
It's just a shame DD doesn't MKP himself occasionally. He occasionally gets in an awful froth over Colov when he's had a skinful.
:)
Seems to happen a lot. Only hurts himself and his business, really.
Harry can't compile kernels, he still think they are ROMs
too many options to compile a kernel in the config menu, most of the terms used he probably has never heard before,
I compile my kernels at least once a month :p
^ I've never heard fellatio described that way before.
:)
^ Nice one - Green sent.
What particular purpose do you plan to use Nessus for, ie what are you trying to secure?
isn't this cute, Server Room Deployment Boy having gay sex with basement boy XBOX harry :)
you are projecting weird things XBOX, maybe too much time in the basement with Call of Duty ?Quote:
Originally Posted by harrybarracuda
I should add that Buttplug is actually a low-level clerk in his company's HR department. He is considered a "computer guru" by the three pin-money grannies he works with.
Obviously it's not that interesting a job, so he comes up with these wild fantasies and beats off in the toilet. That's why you don't hear from him for hours.
:rofl:
He does love the cock though apparently. Bit of a weirdo.
:mid:
That wasn't the point - Nessus isn't the only such tool. I'm wondering why specifically you were leaning towards it, or what other tools you have been considering?
If it's an issue of it being "certified" or the one you are required to use by some higher level certification authority, then there's that. I'm just wondering about your decision tree that selected Nessus.
Personally, I use SNORT in a variety of installations - it's primarily free, if you want to handle it all yourself, or also available in support-cost and separate 'appliance' deployments. It's robust, flexible and well-supported. It's also being used by various US intelligence and military systems.
Basically, I'm just asking out of curiosity.
Mainly because Nessus is backed by Tenable and I've always found it easy to work with, plus ours isn't an extremely heterogeneous environment so it covers all the bases.
Having said that, the next thing on my list is IDS, and if I can actually get SNORT on a prepackaged appliance, that might be interesting.