Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

Re: [ISSForum] Internet Scanner Effectiveness

Subject: Re: [ISSForum] Internet Scanner Effectiveness
Date: Tue, 25 Jul 2006 09:13:15 -0500
Christopher,
 
Internet Scanner is very effective in our usage.   As to comparing it to third 
party scanning efforts, thats a bit difficult.  Having gone thru the 3rd party 
scanners for audit process we found 3rd parties used a mizzim of tools from 
Nessus,  GFI Landguard and yes in a lot of cases even internet scanner.   
 
So on the basis of will internet scanner get the job done, 100%.  The product 
is fast, through with a lot of configuration and a very updated database.   It 
also had the advantage when doing it yourself of being able to scan the inside 
and the outside (many 3rd party being purely external scans).
 
 Just make sure that self scans meet your own compliance needs.   Its good to 
note that ISS also offers and sells external scanning as well through their 
managed services group.  Last time I saw their costs they were very fairly 
priced to market.
 
Michael



From: "Ostermann, Christopher" <christopher.ostermann@fiserv.com>
To:"'issforum@iss.net'" <issforum@iss.net>
Date: 7/25/2006 7:13 AM
Subject: Re: [ISSForum] Internet Scanner Effectiveness
Can anyone make a claim regarding the effectiveness of IS 7.0 against a
third-party vendor's scanning effort?
How well does the Internet Scanner work at discovering the same, more, or
less vulnerabilties that a third-party's scans?  
Would it be a valuable tool to deploy and use if attempting to "catch"
vulnerabilities alternatively to if the scan is out-sourced?

Thanks


Chris Ostermann

Network Engineering
Christopher.ostermann@fiserv.com 

Fiserv EFT

_______________________________________________
ISSForum mailing list
ISSForum@iss.net 

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla ( https://atla/ 
)-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net 

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

----------------------------------------------------------------------------------------
This is a PRIVATE message. If you are not the intended recipient, please delete 
without copying and kindly advise us by e-mail of the mistake in delivery. 
NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any 
order or other contract unless pursuant to explicit written agreement or 
government initiative expressly permitting the use of e-mail for such purpose.
----------------------------------------------------------------------------------------
_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>