Rollout: Tenable's Nessus 3.0
Posted by
Network Computing
September 15, 2006
Tags: Jordan Weins, Nessus 3.0, Windows hosts, endpoint compliance auditing, vulnerability assessment, vulnerability scanning, Access and Authentication, Accounting, Antivirus, Benchmarks, Custom Programming, Data Encryption, Data Networking & Management, Data Protection, Database Management Services, Enclosures, Firewalls, Freeware, Hotspots, Interactive Applications, Internet Security, Java, Linux, Metals and Mining, Other, Remote Access Software, Scripting, Security Standards, Security and Privacy, Servers & Storage, Software and Web Development, Technology, Tenable, User Interface, VPNs , Vulnerability Assessment and Management, WLAN Security, Web Servers, Web Standards, Windows, Wireless
Channel: Other, Networking & Mgmt, Servers & Storage, Data Protection, Wireless
| The Upshot |
 With recent modifications to Nessus 3.0, Tenable has added complete endpoint compliance auditing to its existing vulnerability scanning product, reducing the number of solutions you must buy.  Few vulnerability-scanning products support both vulnerability scanning and minimum-standards endpoint-compliance checks. Most administrators must use and maintain two separate products.
 Nessus' endpoint-compliance functionality isn't always pretty, but it gets the job done well, and cheaply. Some tweaking is required for Windows hosts if they're not in a Windows domain. This product might not meet all needs without your adding on the much more expensive Security Center.

|
|
|
Tenable generated a lot of attention with its move to a closed-source but still-free 3.0 version of Nessus. That action prepared Tenable for a new type of remote check to Nessus: endpoint compliance, which ensures machines are configured in accordance with an organization's local policies and best practices. This addition puts Nessus in the company of very few others--and introduces a fee-based version of Nessus.
Related Reading
More wireless Insights