Asset and Vulnerability Scanning
from redfox@infosec.pub to cybersecurity@infosec.pub on 07 Apr 2024 17:23
https://infosec.pub/post/10783268

This is not an ad.

Does anyone have experience with Tenable products?

I’m interested in real world experience regarding:

I’m playing with Tenable Security Center and Nessus Scanner. I’m early in the deployment, just looking for pointers and whether anyone has used it?

What alternatives is your org using if not?

Can you compare?

Edit, if anyone is interested, I can post results and opinions here also.

#cybersecurity

threaded - newest

catloaf@lemm.ee on 07 Apr 2024 18:06 next collapse

I’ve used it at a couple places. It’s pretty good. It’s best at checking the box on an audit to say you have a vulnerability management program.

If you want real coverage, you should also be actively involved in what’s in your company’s environment, and how security updates (for external software) and vulnerabilities (for internal) are handled. That is, do you have people looking for vulnerabilities, e.g. with fuzzing?

For Windows environments, you should additionally look at bloodhound and pingcastle.

redfox@infosec.pub on 07 Apr 2024 19:27 collapse

Thanks,. I’ll check into those two

GregoryTheGreat@programming.dev on 07 Apr 2024 22:15 next collapse

It is a requirement for all of the military projects I’ve worked on. Specifically ACAS which has Nessus as a component.

For a solo person doing scans for clients I think the cost is like $2k. Seems fine but I wouldn’t buy it without a guarantee I’d get my money out of it.

There is one other product I’ve tried from greenbone. Never used it professionally. Idk if I would trust it at the same level as Nessus.

redfox@infosec.pub on 07 Apr 2024 23:00 collapse

Good info, thanks.

I am familiar with ACAS, which is why I am testing the products.

Fully capturing all the capabilities of scanning, auditing configuration seems like you could put countless hours into the implementation.

I imagine the ROI is high based on what I’ve seen.

Would you agree?

shellsharks@shellsharks.social on 08 Apr 2024 00:49 next collapse

@redfox I've used Tenable for a LONG time. Pretty much their entire suite of products. Cost in the enterprise is going to vary on how many endpoints you have and what solutions you need.

As for effectiveness. I think it it has been and continues to be VM/scanning best of breed. Security Center specifically is highly extensible. It should be easy enough to get started with though may take some time to build out more advanced things.

Alts include Qualys and Rapid7.

Paging @tecnobabble

redfox@infosec.pub on 08 Apr 2024 02:13 collapse

Thanks

vpz@infosec.pub on 08 Apr 2024 13:48 collapse

I’ve used Tenable Nessus Professional, and Tenable Security Center and both work well in their categories. Nessus Professional is a portable Nessus scanner a security person can take with them to do adhoc scans. Security Center (aka Tenable.sc) is a vulnerability management solution for an enterprise.

Their competition is Rapid7 and Qualys, but I can’t speak to those myself.

redfox@infosec.pub on 08 Apr 2024 14:53 collapse

Makes sense. Thanks. I have heard of R7. Had not heard of Qualys.