Re: Re: Compliance Tool

[kartik.netsec () gmail com]

Hi all,

Thanks for your replies. Here are my answeres to your questions:

1. Looking for a agentless (preferably) solution
2. Qualysgard is out of picture since it sends data over the cloud (even though hashed n encrypted). However, we wanted 
to get it as a solution, but due to Govt rules pertaining to stock exchange data it is not allowed.
3. Though Bladelogic can do this but we cannot use it(saperation of duties for audit) as we use it for patch management.
4. Symantec- Very expensive and TCO is very high.

Here are my couple of questions:
1) Would Nessus perform the same what is required?
2) Any idea about foundstone scanner?

Thanks,
Kartik

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------