Solved

Internal & External Vulnerability Scans

Posted on 2014-03-02
2
439 Views
Last Modified: 2014-03-23
Hello,

I have a client that runs a medical facility, very small, only about 30 employees & computers. We're looking for an internal and external vulnerability scan program we can run once a quarter to gage the security of our network.

Does anyone have any suggestions?
0
Comment
Question by:SouthernTierGraphics
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Assisted Solution

by:edster9999
edster9999 earned 250 total points
ID: 39898565
Step 1 - Download a suite like Kali Linux ( http://www.kali.org/ )
That is what used to be called Back Track.  It is linux with a full set of penetration testing utils.

Step 2 - Do not even think about booting it or installing it without training.
There is a lot more to pentesting than having some software.  That would be roughly like saying "I have some diag software on my laptop for my car - I'm going to service it from now on".
Get a 5 day training course and learn what it is, how it works etc.
If money is tight - get a 1 day course,
If money is *really* tight - get a good book and learn from there.
0
 
LVL 27

Accepted Solution

by:
skullnobrains earned 250 total points
ID: 39901883
using a vulnerability scan will not make it much more secure. you'll just end up with a huge bunch of information which mostly will not apply because they will correspond to modules you're not even using or cases that simply could not happen in your setup while you likely have plenty of other things to take care

here are a few security basics
- don't run servers with a user that has unneeded privileges
- don't mix wan-accessible machines with other machines, additionaly use reverse proxies if possible
- educate your users so they do not do foolish things, if not feasible (or additionnally) make them run their machines under restricted accounts
- use a firewall, don't open useless things, use protocol inspection and/or proxies as much as possible
- don't use a domain, or network drives, or any other stuff that will let malware spread from a machine to the next unless you actually need them. if you do need them, learn how to secure each of them
- use antiviruses on the hosts, file servers, mail servers, espetially if you are using windows. if you are using windows, use personnal firewalls and deactivate unneeded services

this is maybe about 20% of the work that needs to be done before you even consider using a vulnerability scanner
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question