Personal opinion here.

On 28/02/12 11:06 AM, Sallee, Stephen (Jake) wrote:
> We are about to deploy scanning in PF, which engine is better? OpenVAS or 
> Nessus?  I know about Nessus (but we aren't experts) and it is legendary for 
> its ability to scan hosts. However it is not exactly user-friendly.
> 
> We do not have any experience with OpenVAS, so naturally we do not know how 
> well it works or how friendly it is.
> 
> So I ask you community (and Inverse) what would you suggestion be, Nessus or 
> OpenVAS and why?

OpenVAS is free (as in speech *and* beer) while Nessus is not. I would
give OpenVAS a shot but see below.
> 
> Also, as an aside:  We are also planning on deploying a network of snort 
> sensors. Given that snort should detect all undesirable network traffic (if 
> you configure it correctly) is network posturing a worth while endeavor?

Aside from SoH, which isn't supported everywhere yet, client-side is not
worth the hassle (again personal opinion not Inverse's!). A properly
configured and maintained snort will pick up all the crap.

Cheers!
-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to