Re: Vulnerability scanners - what do you use? What seems to be successful for your environment?

["Di Fabio, Andrea" <adifabio () NSU EDU>]

We have been using OpenVAS since Nessus became commercialized.  We are in
the process of integrating it with metasploit autopwn.  So far the only
drawback we have is the lack of built in automated comparison of previous
scans with the current one.





From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ullman, Catherine
Sent: Tuesday, May 25, 2010 11:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Vulnerability scanners - what do you use? What seems to
be successful for your environment?



Greetings!



I am beginning to do some research into vulnerability scanners to be used in
assessing infrastructure weaknesses here at the University at Buffalo.  I'm
wondering if folks out there might be willing to share with us what they're
using, if anything, and any experiences (good or bad) you've had with any of
these products.



Many thanks in advance for your assistance.



Sincerely,

Cathy



Catherine J. Ullman

Information Security Analyst

Information Security Office

University at Buffalo

cende () buffalo edu

Attachment: smime.p7s
Description: