RE: commercial va

["Ben Nagy" <ben () iagu net>]

Aw man, normally I wouldn't bite, but...

DISCLAIMER: I work for eEye.

You should look at Retina as well. For freeware, Nessus is also cool, but I,
personally, would be very careful running it on production networks (we
often recommend that people use nessus as a complement to Retina, but it
does have a habit of freaking out networks).

Cybercop is dead, don't bother. List etiquette suggests that I avoid
discussing ISS.

In general terms, I would encourage you to look at VA as a solution -
everyone knows that the perimiter Firewall / IDS model isn't enough anymore,
and VA can be a very important part of improving your proactive security and
managing your risk.

Nobody in the VA market yet has a "silver bullet", by the way, but all the
major players have now evolved past the simple "scan, report a big list of
problems" approach, which is only half of the story.

ben

> -----Original Message-----
> From: firewall-wizards-admin () honor icsalabs com 
> [mailto:firewall-wizards-admin () honor icsalabs com] On Behalf 
> Of SimonChan () lifeisgreat com sg
> Sent: Wednesday, 16 April 2003 5:00 AM
> To: firewall-wizards () honor icsalabs com
>
>
> Hi,
>
> i'm considering on getting some form of VA product.
>
> * top of my mind is  ISS  scanner
> * NAI/cybercop scanner seems to be dated
>
> Is there any "good" commercial va product out there ?
> Also appreciate any one who has used ISS to feed back as well.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards