Achieving a Nessus Report Total of 0 for Windows Servers
Many users wonder if it is possible to obtain a result summary in Nessus where the Total is 0 for a Windows server, even for checks with no risk factors. In this article, we will explore how you can achieve this goal.
Disabling Checks
Nessus runs a set of plugins that can be customized. By disabling the checks that you do not care about, you can reduce the number of findings in your report. For example, checks like ‘Host Fully Qualified Domain Name (FQDN) Resolution’, ‘Additional DNS Hostnames’, ‘OS Identification’, and other non-risky factors can be disabled.
Mitigating or Resolving Findings
Another way to achieve a Nessus report total of 0 is by actively mitigating or resolving the findings that you do care about. This involves addressing the vulnerabilities or issues identified by Nessus to eliminate any security risks.
However, it is important to consider the thoroughness of your testing along with the result. Disabling all checks and obtaining a report with zero findings may be perceived as cheating by some cybersecurity professionals. It is crucial to strike a balance between reducing irrelevant findings and conducting a comprehensive assessment of your Windows servers.