Nessus Network Monitor (前身為 Passive Vulnerability Scanner® or PVS™)  

被動分析網路流量，提供對網路中受管理和未受管理的資產，持續監控風險可視化

從 IT 到 OT，Nessus Network Monitor（舊稱 Passive Vulnerability Scanner® 或 PVS™）能看見盲點，使您能夠監控並保護您的整個環境。此產品以安全、非侵入的方式進行發現和監控，即使是最敏感的系統亦不例外。

消除關鍵盲點

提供深層封包檢測，以持續發現並追蹤使用者、應用程式、雲端基礎結構、信任關係和弱點。

監控任何位置

與其他任何供應商（包括作業系統、網路裝置、Hypervisor、資料庫、平板電腦、手機、Web 伺服器、雲端應用程式和關鍵基礎結構）相比，橫跨更多科技，自動發現使用者、基礎結構和弱點。

特色

即時網路監控

Continuous Visibility:

• Delivers continuous monitoring and assessment of an organization’s network in a non-intrusive manner
• Monitors network traffic at the packet level to provide visibility into both server and client-side vulnerabilities
• Scales to meet future asset discovery and vulnerability monitoring demands of proliferation of devices, including virtual systems and cloud services

Immediate Vulnerability Detection:

• Automatic infrastructure and vulnerability assessment Identifies server- and client-side vulnerabilities in new and transient assets
• Detects vulnerabilities on communicating systems and the protocols and applications used
• Identifies when an application is compromised or subverted

Suspicious Traffic Identification:

• Identifies unencrypted PII and other sensitive information in motion
• Discovers when internal systems begin port scan of other systems
• Highlights all interactive and encrypted network sessions
• Spots which ports served and browsed for each individual system

Asset Discovery:

• Servers
• Endpoints
• Web applications
• Network devices
• Virtual- and cloud-based devices
• BYOD/mobile devices
• Jailbroken iOS devices

Compliance and Deployment

PCI DSS Compliance

The PCI DSS requires accurate and comprehensive identification of all systems involved in the transmission, processing or storage of credit card data. These systems collectively comprise the "cardholder data environment" (CDE) where PCI DSS controls must be consistently applied and validated on an annual basis. Organizations also must provide evidence of procedures to maintain the integrity of the CDE. Nessus Network Monitor not only monitors known data flows in/out of the CDE but also identifies undocumented data flows, particularly of unencrypted payment card information.

Deployment Options

Nessus Network Monitor is offered at two performance levels: 1 Gbps for monitoring small networks and network segments; and 10 Gbps, which extends Nessus Network Monitor to high-performance datacenters and internet ingress/egress points. All configurations are available for self-contained deployment and as an integrated sensor in Tenable’s continuous network monitoring solution, SecurityCenter Continuous View®, which combines network state assessment, network activity monitoring and extensive reporting.

系統需求

• CPU: 1 x dual-core 2 GHz CPU (32 or 64 bit)
• Memory: 2 GB RAM (4 GB RAM recommended)
• OS: Windows, Red Hat ES 5, Red Hat ES 6, Red Hat ES 7, Mac
• Hard Drive: 20 GB HDD

*需要適用於管理的 Nessus Manager 或 Nessus Cloud。

SecurityCenter

Streamline Vulnerability Scanning, Administration, and Reporting

For organizations with large and complex networks, SecurityCenter combines the power of Nessus® scanning with an enterprise-class vulnerability management platform. SecurityCenter:

• Simplifies administration using a single console that manages distributed Nessus scanners for enterprise-wide security and compliance visibility
• Accelerates scans with distributed and load balanced scanning, using a centralized database for faster and more efficient scans
• Delivers advanced analytics including extensive dashboards, built-in and customizable reports that aggregate scan data to help you identify and respond to security and compliance issues

SecurityCenter Continuous View

Enterprise Platform Upgraded

SecurityCenter Continuous View identifies systems that are vulnerable, currently being exploited or have already been compromised.
Using a unique combination of active scanning, passive detection, and log analysis, our integrated platform discovers and classifies 100 percent of IT assets, including mobile, virtual and cloud systems, with deployment options that accommodate all network architectures.
Security and compliance analysts get real-time dashboards with drill-down detail for precision remediation, faster incident response and forensic analysis to minimize risk, loss, and compliance violations.

版本比較

Log Correlation Engine

Find Actionable Context in Your Data

• Normalize, correlate, and analyze event log data from a single console
• Store, compress, and perform full-text search for rapid attack analysis
• Demonstrate compliance with internal and external mandates efficiently
• Continually assess your security and compliance posture through flexible reporting and consistent metrics

Nessus Manager and Nessus Professional 系統需求

The following chart outlines some basic hardware requirements for operating Nessus: