Red Hat NETWORK 3.6 - Betriebsanweisung PDF herunterladen (Seite 24)

options {

report-threshold 3;

failure-threshold 10;

interface "eth0";

interface "eth1";

key-file "/opt/pvs/var/tenable.key";

plugins-directory "/opt/pvs/var/pvs/plugins";

fingerprints "/opt/pvs/var/pvs/osfingerprints.txt";

memory 50;

report-lifetime 30;

report-frequency 60;

}

networks {

192.168.0.0/24;

}

REMOVING PVS

Red Hat

To remove PVS for Red Hat versions, you need to know what name it is registered as within

the RPM database. This name will not be the same as the filename used for installation. To

determine what name the PVS RPM is registered as, run the following command:

# rpm -qa | grep pvs

This will produce output similar to the following:

pvs-3.6.0-1.x86_64

For this example, the command to remove the PVS RPM would be:

# rpm -e pvs-3.6.0-1.x86_64

This will not remove configuration files or files that were not part of the original installation.

Files that were part of the original package but have changed since installation also will not

be removed. To completely remove the remaining files, run the following command:

# rm –rf /opt/pvs

PVS REAL-TIME TRAFFIC ANALYSIS CONFIGURATION

THEORY

This section describes how configuration options affect PVS operation and provides details

on PVS architecture.

FOCUS NETWORK

When a focus network is specified via the “networks” keyword, only one side of a session

needs to be matched on the list. For example, if you have a DMZ that is part of the focus

network list, the PVS will report on vulnerabilities of the web server there, but not on web

clients visiting from outside the network. However, a web browser within the DMZ visiting

the same web server would be reported.

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 60 61

Keine Kommentare

Red Hat NETWORK 3.6 - Betriebsanweisung Seite 24