Course Overview

/

Installing Nessus

Installing Nessus

Installing Nessus

A vulnerability scanner is a tool used in cybersecurity to identify weaknesses and vulnerabilities within computer systems, networks, and applications. It is an essential component of vulnerability management and helps organizations proactively identify and address security risks.

The primary purpose of a vulnerability scanner is to scan target systems and identify potential security vulnerabilities, misconfigurations, or outdated software versions that could be exploited by attackers. These vulnerabilities can range from software flaws and weak passwords to insecure network configurations and outdated patches.

Vulnerability scanners utilize various techniques to discover and assess vulnerabilities. However it is important to note that they can only test for known vulnerabilities.

To identify these, scanners will identify live hosts and running services, then employ a database of known vulnerabilities and security checks to scan each open port and service. The output of these checks is compared to the database to alert the existence of potential findings.

Scanners can provide value by quickly identifying potential vulnerabilities and highlighting the level of risk based on its potential impact and likelihood of exploitation. This helps prioritize vulnerabilities and focus on critical issues that require immediate attention.

Once the scanning process is complete, the scanner generates comprehensive reports that detail the identified vulnerabilities, their severity, and recommended remediation steps. These reports assist security teams in understanding the security posture of their systems and aid in the mitigation of identified vulnerabilities.

Nessus is a widely-used vulnerability scanner developed by Tenable and is regarded as one of the industry standard tools. To install Nessus you will need to follow the following steps:

1. Visit the official Tenable website (https://www.tenable.com/) and download the appropriate version of Nessus for your operating system.

2. Run the installation package and follow the on-screen instructions to complete the installation process. Ensure that you have the necessary permissions to install software on your system.

3. Once the installation is complete, access the Nessus web interface by launching your preferred web browser and entering the appropriate URL (https://localhost:8834/).

4. Create an administrator account by providing the required details and follow the instructions to set up your Nessus instance.