Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 442
  • Last Modified:

Internal & External Vulnerability Scans

Hello,

I have a client that runs a medical facility, very small, only about 30 employees & computers. We're looking for an internal and external vulnerability scan program we can run once a quarter to gage the security of our network.

Does anyone have any suggestions?
0
SouthernTierGraphics
Asked:
SouthernTierGraphics
2 Solutions
 
edster9999Commented:
Step 1 - Download a suite like Kali Linux ( http://www.kali.org/ )
That is what used to be called Back Track.  It is linux with a full set of penetration testing utils.

Step 2 - Do not even think about booting it or installing it without training.
There is a lot more to pentesting than having some software.  That would be roughly like saying "I have some diag software on my laptop for my car - I'm going to service it from now on".
Get a 5 day training course and learn what it is, how it works etc.
If money is tight - get a 1 day course,
If money is *really* tight - get a good book and learn from there.
0
 
skullnobrainsCommented:
using a vulnerability scan will not make it much more secure. you'll just end up with a huge bunch of information which mostly will not apply because they will correspond to modules you're not even using or cases that simply could not happen in your setup while you likely have plenty of other things to take care

here are a few security basics
- don't run servers with a user that has unneeded privileges
- don't mix wan-accessible machines with other machines, additionaly use reverse proxies if possible
- educate your users so they do not do foolish things, if not feasible (or additionnally) make them run their machines under restricted accounts
- use a firewall, don't open useless things, use protocol inspection and/or proxies as much as possible
- don't use a domain, or network drives, or any other stuff that will let malware spread from a machine to the next unless you actually need them. if you do need them, learn how to secure each of them
- use antiviruses on the hosts, file servers, mail servers, espetially if you are using windows. if you are using windows, use personnal firewalls and deactivate unneeded services

this is maybe about 20% of the work that needs to be done before you even consider using a vulnerability scanner
0

Featured Post

Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now