Re: LANguard vs Nessus

[Gene Yoo <gyoo () attbi com>]

fengjie () pacific net sg wrote:
> I am evaluating LanGuard at this moment. Nessus I only heard of (many
> said it's VERY good) but never have hands on. However installation
> and configuration is still a hassle compared with LanGuard. You only

true for the client side, but for distributed scanning with multiple 
clients transacting with a centralized server is hardly a comparison of 
easy installation.  windows client 1.4.4 for nessus is single click as well.

> need a workstation plus local administrator right to run LanGuard. It
> can scan a range of IP addresses and generate a XML file, which you
> can filter to generate various reports. It can deploy patches and I
> did try it. Quite stealthily, it works fine at the background. You

run /usr/local/sbin/nessus-adduser use your windows client to connect to 
port of your specification using nessusd -D -p xxxx.  remote client 
connects via CA or passpharase and voila.  btw, except for the patching, 
it can also export to pdf and html for reporting.  the development team 
is working on nice graphs for those who can't seem to export the data to 
some spreadsheet and make the nice graphs for your organization.

> support is very helpful. Even for evaluation I have dozens of
> correspondants with their engineer over the phone and emails. And the
> price is close to none in a big organization. For US$695, you can
> scan unlimited number of IP addresses, from one installation. Since

check out www.tenablesecurity.com for distributed va scanning.

what is the comparison criteria?  depending on the tester, you could get 
various information out of these tools.

btw, we did use languard and moved to retina, then i finally settled 
with nessus with mysql backend for our distributed va needs.

gene yoo - sysops mgr
--
<<gyoo [at] attbi [dot] com>>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iQCUAwUBPhxERRxoVYCzmrKXAQJK5gP3Y7CTsFyKpEz2p5W4GWI9+qSm+kWfdJ0R
xNlma0Ma9rAL/OBJcZMo5IXyXas+3Edogbv4Al6dIf8lot1WS0Iaxxl/cg2f7gf+
otf7LfNpZDE/6OzR7A1qN6baPMLSjGzywwQWMfSVuWWb6kGQxMsA13Kn68G7Ozxs
5CODZqUPyg==
=AolA
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------