-: Scanning perspective.
So, another thing that you can configure
in your scanner is the scanning perspective.
Comprehensive scanners are gonna allow you
to do this from different perspectives.
Things like the internal perspective
and the external perspective.
The external scan is gonna provide you
the viewpoint of an attacker,
while the internal scan is gonna
give you the perspective of an insider threat
or a rogue system administrator.
Datacenter scans can provide you a close internal scan,
one that might be blocked by other security devices.
And it gives you a completely different perspective
than an internal or an external scan.
Now, when I look at something like
an internal and external scan,
remember, PCI-DSS requires both internal
and external scans to be conducted.
Internal scans can be performed by your own techs.
External scans must be done by approved outsiders
to scan your network to meet the regulatory requirement.
Now, that's the important thing.
You can still run those external scans
to figure out where you sit before you
pay all this money for an outside organization to come in.
But you still have to get them to scan it to sign off
so that PCI-DSS says you've met the requirement.
Now, policies are gonna define your scan perspective.
Just like we talked about in the last lesson with templates,
you can template these out, and you can see here
that I have two shared policies,
an internal network scan and an external network scan,
that are templated by default from Nessus,
and I can use those for my scanning
in my scan perspective to meet my requirements.