Vulnerability scanners

From: Dan Lynch (dan.lynch@placer.ca.gov)
Date: 03/27/03

  • Next message: Desmond Irvine: "Re: Odd situation, advice needed on penentration test results" 
    Date: Wed, 26 Mar 2003 15:46:32 -0800
From: "Dan Lynch" <dan.lynch@placer.ca.gov>
To: <pen-test@securityfocus.com>

    Greetings list,
     
    Yesterday some reps from Qualys came with a sales presentation for
    their QualysGuard appliance. I'd like to solicit your comments and
    opinions on that product. In particular, do you think it's $45,000 per
    year better than Nessus? (That's about the cost we'd face based on our
    IP address range.) They claim it costs as much in administration to run
    Nessus. Does Qualys' claim to more vulnerability signatures and
    faster/easier updates hold water?
     
    Any input you can offer is greatly appreciated.
     
     
     
    Dan Lynch
    Information Technology Analyst
    County of Placer
    Auburn, CA
     
    530/889-4222
     

    Bureaucracy: the art of making the possible impossible.

    top spam and e-mail risk at the gateway.
    SurfControl E-mail Filter puts the brakes on spam & viruses
    and gives you the reports to prove it. See exactly how much
    junk never even makes it in the door. Free 30-day trial:
    http://www.surfcontrol.com/go/zsfptl1

  • Next message: Desmond Irvine: "Re: Odd situation, advice needed on penentration test results"

    Relevant Pages

    • RE: Vulnerability scanners
      ... By the way, I meant Qualys, not Qualysis.... ... This electronic mail message contains information belonging to Lucent ... You could always go with the limited budget solution - Nessus and "Almost ... use Nessus to complement the results from whatever commercial vulnerability ...
      (Pen-Test)
    • RE: Vulnerability scanners
      ... CyberCop, Nessus, Foundscan, and now Qualys. ... for single system reports. ...
      (Pen-Test)
    • Re: Vulnerability scanners
      ... Let's assume that you're talking about 256 IPs (based on Qualys' published ... the incremental cost of their service must be far less than that. ... SurfControl E-mail Filter puts the brakes on spam & viruses ...
      (Pen-Test)
    • RE: Vulnerability scanners
      ... I'd be astounded if it took that much money to administer Nessus. ... NASL plugins out within hours of the vulnerability being made public. ... Finally, a company I worked for tested Qualys once, and they failed to find ...
      (Pen-Test)