<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.2.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: Now You Can Do Anti-Virus Audit with Nessus</title>
	<link>http://www.dragoslungu.com/2007/02/17/now-you-can-do-anti-virus-audit-with-nessus/</link>
	<description>Security Tools and Tips</description>
	<pubDate>Wed, 20 Aug 2008 14:20:55 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.2.2</generator>

	<item>
		<title>By: Max</title>
		<link>http://www.dragoslungu.com/2007/02/17/now-you-can-do-anti-virus-audit-with-nessus/#comment-6</link>
		<author>Max</author>
		<pubDate>Sun, 18 Feb 2007 07:09:00 +0000</pubDate>
		<guid>http://www.dragoslungu.com/2007/02/17/now-you-can-do-anti-virus-audit-with-nessus/#comment-6</guid>
		<description>you are right Alan, I also think that a good security management framework should go beyond ticking boxes on a compliance checklist. &lt;BR/&gt;&lt;BR/&gt;However,by adding AntiVirus audit checks, Tenable seems to go for a piece of the compliance pie.</description>
		<content:encoded><![CDATA[<p>you are right Alan, I also think that a good security management framework should go beyond ticking boxes on a compliance checklist. </p>
<p>However,by adding AntiVirus audit checks, Tenable seems to go for a piece of the compliance pie.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alan shimel</title>
		<link>http://www.dragoslungu.com/2007/02/17/now-you-can-do-anti-virus-audit-with-nessus/#comment-7</link>
		<author>alan shimel</author>
		<pubDate>Sun, 18 Feb 2007 01:40:00 +0000</pubDate>
		<guid>http://www.dragoslungu.com/2007/02/17/now-you-can-do-anti-virus-audit-with-nessus/#comment-7</guid>
		<description>Hi saw your post on the security bloggers network feed.  I saw the Tenable post as well.  My question is what good is scanning for the anti-virus without taking some action.  Either quarantine or remediate the device.  Discovery for discovery sakes alone is not compliance.  This is why with vulnerability management scanning doing compliance management, I think it is an interim step towards NAC type of functionality or automated remediation.</description>
		<content:encoded><![CDATA[<p>Hi saw your post on the security bloggers network feed.  I saw the Tenable post as well.  My question is what good is scanning for the anti-virus without taking some action.  Either quarantine or remediate the device.  Discovery for discovery sakes alone is not compliance.  This is why with vulnerability management scanning doing compliance management, I think it is an interim step towards NAC type of functionality or automated remediation.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
