Re: Vulnerability scanners

[Nicolas Gregoire <ngregoire () exaprobe com>]

On Thu, 2003-03-27 at 19:58, Jeff Williams @ Aspect wrote:
> Let's assume that you're talking about 256 IPs (based on Qualys' published
> pricing), and you want to scan weekly.  That's at least a day a week of
> effort for someone (probably more to generate a very nice report and
> summaries).

Using Nessus with differential scanning, you can weekly scan 256 IPs and
analyse the report (in a normal production mode) in less than 1 or 2
hours. Just make a full scan every month to be sure that everything is
re-checked, and that's all ...

By the way, you can use the differential report to be sure that there's
some progress in the internal patching process.

Regards,
-- 
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoire () exaprobe com ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F  FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F

Attachment: signature.asc
Description: This is a digitally signed message part