Re: neXpose

[Bob Bruen <bruen () coldrain net>]

Hi HD,

It appeared to me (from the outside) that the page was changed from the 
time I first used it, to starting to send the email, then to my second 
attempt (which appeared not work, but in fact did). Thus my second email.

I did get alerts when fields were empty. I filled the fields one at a time 
to see which were required. I am not using NoScript or equivalent.

My guess is that this is new process for them (free stuff) and it's a bit 
rough. I do not mind that the email had a key delivered via email that I 
had to enter - although real free stuff shouldn't require a key 
(unimportant personal opinion only).

I am installing neXpose now and as promised, it is taking a while (35 
minutes), due the db set up. The next startup took almost 8 minutes. The 
install dialogue is nice and straight forward. They are not kidding about 
a dedicated server and lots of memory.

There is an issue with certificates when you first log on, but Firefox 
helps getting it settled.

I'll test it on my internal network later - I have no plans for any 
commercial use.

Just a suggestion, but there is no need to stress over this. Although, you 
have some expertise in making things run smoothly and quickly, which 
rapid7 could benefit by :)


              --bob

On Wed, 23 Dec 2009, HD Moore wrote:

> On 12/23/2009 9:40 AM, Bob Bruen wrote:
> > The neXpose download does not work even after you enter in all your
> > marketing info. I am trying it again, it behaves differently now, required fields are
> > not labled, but now you must enter in everthing.
>
> I'll ask the folks who maintain it to double check field validation - it
> should be displaying an alert() when fields are missing. Are you using a
> plugin like NoScript?
>
> > And when you finish, you do not get
> > access to the software, you get a promise that some sales droid will get
> > in touch in two days to "help" you get through the process.
>
> Download requests are approved in batches every ~10 minutes or so - the
> process is a little klunky since we don't have in-product registration
> yet. As soon as it is possible to obtain a license from within the
> product, we can avoid the web/email based activation process and smooth
> out the download process.
>
> Thank for giving NeXpose a shot - the latest version now supports full
> PDF/HTML reporting, which makes it immediately useful for auditing small
> networks. As far as I know, NeXpose Community edition is the only
> enterprise-ready vulnerability management solution available
> free-of-charge for commercial purposes.
>
> -HD
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework

--
Dr. Robert Bruen
Knujon
http://knujon.com
http://coldrain.net/bruen
+1.802.579.6288

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework