Vulnerability scanners

["joe na" <valarian () mail com>]

I am currently helping evaluate vulnerability scanners to deploy in a large enterprise. We looked at Qualys and Retina 
so far. Retina has the most mature Enterprise distribution model, however Qualys does have more signatures. That being 
said some of the Qualys' signatures seem trivial. I am not sure all of the signatures are truly vulnerabilities thus 
putting into question their claim of having more vulnerability checks. We also looked at Cenzic a cool flaw injection 
tool not a true vulnerability scanner. The folks from ISS coming out to demo their product next, so far Retina is the 
clear for-runner with there distributed scanning reporting and remediation model. 

One question that seems important is whether a Windows or UNIX based tool is better. Windows based tools seem better 
for reading the registry of Windows hosts.  I think the scanner you should depend on your needs and the platforms you 
deploy in your enterprise. 

Later,

Joe
-- 
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup


top spam and e-mail risk at the gateway.
SurfControl E-mail Filter puts the brakes on spam & viruses
and gives you the reports to prove it. See exactly how much
junk never even makes it in the door. Free 30-day trial:
http://www.surfcontrol.com/go/zsfptl1