Re: Distributed Vulnerability Scanners

["Talisker" <talisker () networkintrusion co uk>]

Hi Greg
Thanks for responding to my query
I visited the Qualys website and it refers to providing a service.  I was
also under the impression that Qualys whilst a managed service provider also
offered the appliance for use wholly by the customer.  If we're correct in
this assumption any idea where I can find the info.

The dark side (Marketeers) have ravished both the nCircle and Qualys
websites to such a degree that it is hard to find technical detail amidst
all the hype, especially regarding how they manage their scanning agents
remotely. (though after a week on this one, I'm starting to become web
blind)

Just to highlight to the list my original mail was looking for tools that
could be used by a managed service in a distributed fashion NOT for the
managed services themselves.

take care
-andy

Taliskers Network Security Tools
http://www.networkintrusion.co.uk
----- Original Message -----
From: "Greg Reber" <greg.reber () astechconsulting com>
To: "Talisker" <talisker () networkintrusion co uk>;
<pen-test () securityfocus com>
Sent: Thursday, March 06, 2003 6:26 PM
Subject: RE: Distributed Vulnerability Scanners


> Andy - check out Qualys (www.Qualys.com ) and nCircle (www.ncircle.com)
>
> -greg
>
> The information in this email is likely confidential and may be legally
> privileged. It is intended solely for the addressee. Access to this email
by
> anyone else is unauthorized. If you are not the intended recipient,  any
> disclosure, copying, distribution or any action taken or omitted to be
taken
> in reliance on it, is prohibited and may be unlawful.
>
> -----Original Message-----
> From: Talisker [mailto:talisker () networkintrusion co uk]
> Sent: Wednesday, March 05, 2003 2:56 PM
> To: pen-test () securityfocus com
> Subject: Distributed Vulnerability Scanners
>
> Hi
> I'm looking for vulnerability scanners that will do their business
remotely,
> especially useful for distributed networks with low bandwidth or managed
> services.
>
> I only know of 3:
> Lightning Proxy
> http://www.tenablesecurity.com/proxy.html
>
> Nessus
> http://www.nessus.org/features.html
>
> Retina
> http://www.eeye.com/html/Products/Retina/index.html
>
> Does anyone know of any more, I would suggest that this excludes web based
> scanners like shieldsup etc as they don't resolve the bandwidth issue, was
> the problem with shieldsup (demonstrated at BlackHat Europe 2001) ever
> resolved whereby you could use it to scan anyone you wished??
>
> Anyway the list when completed will appear here, though it's not on the
site
> navigation yet.
> http://www.networkintrusion.co.uk/dist.htm
>
> Sorry about the amount of posts of late but I have been on vacation and
> therefore have time to read my email.
>
> take care
> -andy
> Taliskers Network Security Tools
> http://www.networkintrusion.co.uk
>
>
> --------------------------------------------------------------------------
--
> Are your vulnerability scans producing just another report?
> Manage the entire remediation process with StillSecure VAM's
> Vulnerability Repair Workflow.
> Download a free 15-day trial:
> http://www2.stillsecure.com/download/sf_vuln_list.html


----------------------------------------------------------------------------

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html