Security Basics mailing list archives

RE: Justifying the spend on a vulnerability scanner


From: "Buyer Jr, David" <DBuyer () KaleidaHealth Org>
Date: Fri, 21 Mar 2003 16:03:34 -0500

Why is nessus out the window. It can scan Windows system just as well as
Unix system. It also has a GUI that the mgmt people can use.


DB

-----Original Message-----
From: mhunt [mailto:mhunt () hotpop com]
Sent: Friday, March 21, 2003 04:02
To: security-basics () securityfocus com
Subject: RE: Justifying the spend on a vulnerability scanner



I like Retina by Eeye.  It rocks, and goes to the level of having the
Microsoft Knowledge Base number, the Bugtraq ID number, and the exact
steps to fix many vulnerabilities.  It often allows you to 
remotely fix
registry vulnerabilities right from Retina.  It is a bit 
expensive, but
well worth it.

-----Original Message-----
From: Gerhard Rickert [mailto:rickert () ocn ad jp] 
Sent: Tuesday, March 11, 2003 8:15 PM
To: security-basics () securityfocus com
Subject: Re: Justifying the spend on a vulnerability scanner

Just a thought in this area...what do you think of Observer. Is it an
overpriced tool? Would it work for what Mr. Berry wants?


----- Original Message -----
From: "JM" <jamesmcgeeiom () onetel net uk>
To: "Leon Ward" <leon.ward () added-dimension co uk>;
<security-basics () securityfocus com>
Sent: Tuesday, March 11, 2003 11:49 PM
Subject: RE: Justifying the spend on a vulnerability scanner


Sorry

Should have made the request a little clearer.

We are a W32 house, No *nix, so stuff like nessus, are out of
the window.

I also would like a tool that management can use to see how
easy it is, so really command line stuff is out the window
too.

Thanks again






-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.surfcontrol.com/go/zsfsbl1


Current thread: