I want to scan with Nessus a network which include OT devices but I don't know how can I config Nessus to do it.
Firstly, I disable ping scan, before of Nessus scan I do a IP enumerate with Nmap, and
Service Discovery option. In addition, I change
default value of
Port Scanning, setting the OT tipical ports, more or less 25 ports. Besides, in
Assessment I disabled
Request imformation about thre SMB domain.
Finally, on Advanced I set 1 on
Network timeout (in seconds),
Max simultaneos checks per host and on
Max simultaneous hots per scan. On
Max number of concurrent TCP sessions per host and
Max number of concurrent TCP sessions per scan I set the value 25.
Plugins I don't know what change can I do to do a correct and effective scan with Nessus.
I am doing the scans via VPN.
Is correct my config? What is the best plugin config to OT devices?