Re: OpenVAS vs Nessus

[Vincent Maury <maurybond () gmail com>]

Hi,

from my point of view, getting the newest vulnerability checked by the 
most up-to-date scanner may not be the most relevant, as fixing the 
vulnerability might be much harder than revealing it. Mostly because 
patch management shows to be quite a tough process in many companies, 
therefore implementing a patch may occur months after its release.
Could also be because the patch is not ready yet (what is the average 
patch development delay?).
To put it in a nutshell, I'd consider speed, reliability, and (most of 
all) quality of plugins, instead of quantity or timely updates. Do they 
address the most critical and common vulnerabilities? That would be my 
way to compare these tools.

Regards,

Vincent


Le 23/07/2010 10:24, Fedora Hacker a écrit :
> I still prefer nessus. The same update factor.
>
>
> On Thu, Jul 22, 2010 at 11:40 PM, Jacky Jack<jacksonsmth698 () gmail com>  wrote:
>    
> > Hi
> >
> > A lot of people might have argued which is better in some places.
> >
> > Let me know your point of view and experience which one is better.
> >
> > At least I think a vulnerability scanner must have timely updated
> > information . The more it has, the more it can cover.
> >
> > How do you think?
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
> > it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> > install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> > highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
> >
> >
> >      
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
> it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
>    


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------