Re: Vulnerability Assessment

Uzair,
 There are a number of products on the market each with different
pros, cons and prices.  You have to also keep in mind the hardware,
and support costs as well.

As mentioned before, you should check out Nessus and Retina
(http://www.eeye.com/html/products/retina/index.html) .

Networkcomputing world also has a number of reviews, so search there
site. (http://www.eeye.com/html/products/retina/index.html)

Also review the reporting tools of the software.  For myself I the
flexibility of reporting is one of my main purchase factors, as I have
to prepare reports both for upper management, compliance, internal
audit, and the engineers.

On 6/4/07, Uzair Hashmi <uzair@kse.com.pk> wrote:
> Hello list,
>
> I have been evaluating an automated vulnerability assessment software, have 
> found two of them better for the organizational needs. I need your help to 
> select only one out of the two.
>
> 1- QualysGuard (http://www.qualys.com)
> 2- Foundstone Enterprise 
> (http://www.mcafee.com/us/enterprise/products/vulnerability_management/foundstone_enterprise.html)
>
> Please advice.
>
> Regards,
> Uzair
>
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic
> See HOW Now with our 20/20 program!
>
> http://www.cenzic.com/c/2020
> ------------------------------------------------------------------------