We know anyone can scan us at any time, we would like to broadly scan anything externally exposed with Nessus.
Note: adding traffic as a heads up
The plan is to report High and above and anything that seems irregular back to the rest of the organization.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • chasemp | T222097 scan external ranges with current Nessus rulesets | |||
| Restricted Task |
A few scans of all ranges didn't turn up too much scary. A collection of mediums that are mostly SSL shenanigans or weak SSH ciphers etc. T222392 was the most pressing thing I found and it seems to be squared away. I'm thinking we need to scan weekly and report on High or above for awhile and maybe someday we can bring that down to medium. I need to write up some more docs on this process but the initial idea was to scan and see where we stand.
If anyone is curious to see the results Security-Team can share but at this point I'm not going to put it all up in phab.