Roberto Nogueda ITACS 5211: Introduction to Ethical Hacking Professor: Wade Mackey Nessus Vulnerability Scan exercise Temple University

Host and host IP address Basic Network Scan The results displayed in this page provide important information on my private home network with the following descriptions: Host and host IP address Vulnerability Medium Low Info This information can come in handy because patches and fixes can be done to those devices that need the updates individually, and not to the whole network.

Vulnerability Scan break down In this scenario, the type of vulnerability is display in descending order from Medium to Info, and color coded for easy identification, which means that the most important vulnerabilities should be prioritized or looked after first. A simple Google search could found the fix or patch for each vulnerability found here. Since they are all SSL certificate related, it makes it easy to find the patches on those plugin issues detected. For the Info type of vulnerabilities, I would make sure to keep an eye on them before they become a bigger issue or tread.

Conclusion and Lessons Learned Nessus is a great application for vulnerabilities detections in a private or public network. A comprehensive report can be exported and printed to present in a meeting or for technical analysis purposes. A network scan should be launched in a weekly basis if critical or important vulnerabilities are discovered, then switch to twice a month if vulnerabilities are low or less important. Network scans are very important because it may be the only way users discover vulnerabilities before it’s too late. Thank you