RE: Why eEye Retina (was MBSA scanner)

From: Cam Beasley, ISO (cam_at_austin.utexas.edu)
Date: 04/20/04

  • Next message: Jeremy Junginger: "HTTP Manipulation" 
    Date: Tue, 20 Apr 2004 11:06:55 -0500
To: <pen-test@securityfocus.com>

    Agreed..
    Nothing beats the accuracy and speed of Nessus.
    If you know how to customize .nasls it is even better.
    If you need a commercial version for your
    enviroment, consider TenableSecurity's offering:

    http://www.tenablesecurity.com/

    ~cam.

    Cam Beasley
    Information Security Office
    The University of Texas at Austin
    cam@austin.utexas.edu

    > -----Original Message-----
    > From: clarke-cummings@columbus.rr.com
    > [mailto:clarke-cummings@columbus.rr.com]
    > Sent: Tuesday, April 20, 2004 09:37
    > To: pen-test@securityfocus.com
    > Subject: Why eEye Retina (was MBSA scanner)
    >
    >
    > Hello Everyone,
    >
    > We recently began evaluating eEye's Retina product for our
    > vulnerability assessment tool. We have found the results to
    > be very inconsistent, showing us vulnerable to issues that
    > have been patched. We've verified the patches manually, with
    > MBSA, HFNETCHK, and LanGuard. eEye didn't have a good answer
    > as to why the results were so inconsistent. Any guesses?
    >
    > Also, how is their support response for those that are
    > customers? As a trial customer they aren't a very impressive
    > organization.
    >
    > Thanks in advance for the help.
    >
    > Cheers,
    > Clarke
    >
    > --------------------------------------------------------------------
    > mail2web - Check your email from the web at http://mail2web.com/ .
    >
    >
    >
    > --------------------------------------------------------------
    > ----------------
    > Ethical Hacking at the InfoSec Institute. Mention this ad and
    > get $545 off any course! All of our class sizes are
    > guaranteed to be 10 students or less to facilitate one-on-one
    > interaction with one of our expert instructors. Attend a
    > course taught by an expert instructor with years of
    > in-the-field pen testing experience in our state of the art
    > hacking lab. Master the skills of an Ethical Hacker to better
    > assess the security of your organization. Visit us at:
    > http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    > --------------------------------------------------------------
    > -----------------
    >
    >

    ------------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
    any course! All of our class sizes are guaranteed to be 10 students or less
    to facilitate one-on-one interaction with one of our expert instructors.
    Attend a course taught by an expert instructor with years of in-the-field
    pen testing experience in our state of the art hacking lab. Master the skills
    of an Ethical Hacker to better assess the security of your organization.
    Visit us at:
    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    -------------------------------------------------------------------------------

  • Next message: Jeremy Junginger: "HTTP Manipulation"
    • Quantcast