‫So hang on, before rushing in to start our first Nessa scan.
‫I'd like to show you how to create our own policies.
‫Policies allow you to create custom templates defining what actions are performed during a scan in the
‫NASA's web interface.
‫Click policies at the left side you see that good.
‫Click the Create a new policy link inside the Policies page.
‫Now here we have a lot of scanners, so an advanced scan.
‫All the options are chosen by us without any guidance or recommendations.
‫Basic network scan is generally suitable for any host.
‫Internal PCI Networks Scan is designed for internal scans, and it's based on PCI DSS standards.
‫PCI, DSS Payment Card Institute and data security standards, simply one of the most important information
‫security standards.
‫So it looks like the days when this video was captured that spectre and Meltdown are the really new
‫vulnerabilities.
‫So here there is a scan specialized for Spectre and Meltdown vulnerabilities.
‫This clearly shows how up to date Nessus is here.
‫There's another scanners specific for web applications.
‫So let's configure our own scan.
‫Click Advanced Scan.
‫First, give a name for your policy.
‫Now go to Discovery section.
‫So we're in the host discovery page.
‫Here we have a ping, the remote host option and the settings of the ping if we're going to use the
‫data we collected within Map.
‫We can close this ping scan because we already have the lists of the hosts click port scanning to configure
‫port scanning options.
‫The default value of the port scan ranges will default.
‫That means Nessus will scan the ports, which is in its nesses services file.
‫Now I go to the terminal screen to analyze NSA services file.
‫Let's find the file first.
‫Use the fine command to find the file.
‫Slash means that the search will begin from the root directory.
‫Dash name shows the name of the search file and hit enter.
‫And here it is.
‫You can stop the search using Control C keys.
‫I use a less common to see the content of the file.
‫Here are the port's protocols and the default services which use these ports.
‫Now I want to see the number of the lines of NASA's services file to understand how many ports are scanned
‫by default.
‫Command with a file name.
‫Pipe down, will you see to see the word count?
‫The first number is the number of lines, a second one is a number of the words and the last one is
‫the number of the characters.
‫So we can say that 9000 ports are scanned by default, which is a total of both TCP and UDP ports.
‫But what have you want to see the number of TCP ports scanned by default?
‫You can use grep before WC Typekit file name.
‫Pipe grep.
‫TCP pipe WC.
‫You will see the number of TCP ports scanned by default.
‫There are about 4600 TCP ports.
‫Now, if you want to scan for all ports, you should type one through six five five three five in port
‫scan range feel.
‫So here are the options to use state service for local board enumerators.
‫So let's have a short break here.
‫If you have some credentials to scan some services and death, you can define those credentials before
‫the scan.
‫So here, select the Credentials tab and you see some services when you click the associate, for example.
‫You will see the credential options.
‫But let's remove this for now.
‫Now turn back to Settings by clicking its tab.
‫We were in Discovery Port scanning page, and here are the port scanning options.
‫Since scan is selected by default, if you like, you can select TCP and or UDP scans as well.
‫Now go to the advanced section.
‫Safe checks are enabled by default.
‫So we can select scan IP addresses in random order to make the scan a little more stealthy.
‫Let's look at the performance options.
‫We can reduce the number of Mac simultaneous hosts per scan to avoid delays in network traffic.
‫Max, number of concurrent TCP sessions per host is not defined by default.
‫We can define an upper bound to keep the hosts safe.
‫And again, we may define a maximum number of concurrent TCP sessions per scan to keep the network traffic
‫safe.
‫Now, look at the tabs on the top of the new policy page and you'll see the plug ins tab, right.
‫So here we have tons of plug ins used in Nessus scans.
‫If you click one of the plug in families, you'll see all the plug ins of that family.
‫You see the total number of plug ins that are plug in family.
‫And here are the plug ins.
‫You can click on enabled next to a plug in to disable it.
‫Or if you want to disable an entire plug in family entirely, for example, denial of service, click
‫on Enable Label next to the name of the plug in family, click Save.
‫And now we have our own scan policy.