Nessus scanning

[onslaught99]

Hello,

We recently acquired the Virtual Nessus scanner and have it sitting on a server "inside" our ASA firewall. I want to verify what port(s) that the Nessus needs to go "outside" our firewall to scan other locations. Just curious if it will need a certain TCP or UDP port to reach out or do I have to open the firewall up completely. I do not want to open up the firewall to everything just to allow the scanner to run. Any input would be appreciated.

Thanks

[Panos Kampanakis]

I am not sure what ports Nessus uses to call home.

But .you should only allow ports going to your server from the outside (outside ACL) that you want (for example web if the server is using web). Then all inbound traffic (initiated from outside) will be blocked unless the services you want. Inside initiated conns from Nessus will still work.

I hope it helps and makes sense.

PK