Nessus Erfahrungen

Nessus Vulnerability Management - Thorough Scan of your Network

Kommentare: Used Nessus for quite some time now. Excellent product .

Vorteile:

User Interface , Scan Profiling , Policy creation is easy and straightforward

Nachteile:

Reporting features could be improved upon

A Must have for MSSP

Vorteile:

A Professional tool that gives stellar results

Nachteile:

Price can be a bit steep for small businesses

Great Software to Detect Vulnerabilities

Kommentare: Nessus has been a great tool for the company I work at. Deploying it is just a matter of installing it, and putting in the right information in the installation, which can be automated. Once it's installed, it just works. It detects every known vulnerability there is.

Vorteile:

Vulnerability scanning in Nessus is very accurate, it rarely gets anything wrong. It is also easy to deploy.

Nachteile:

The only downsides of Nessus that I have experienced are that sometimes it gets false positives, but not very often, and that the UI of the website can be finicky sometimes.

Good Choice for some

Vorteile:

Great scannerOld pro version was a perfect choiceAbility to rescan one item

Nachteile:

Tenable kept removing core functionsWeak web scanning capabilities

Great vulnerability scanner

Kommentare: My overall experience with Nessus has been extremely positive. It's reliable, regularly updated, and the scan reports are easy to read and actionable. The speed at which it identifies vulnerabilities is impressive, and it's saved me countless hours of manual checks.

Vorteile:

Nessus is hands down the most popular vulnerability scanner for good reason. It runs incredibly comprehensive vulnerability scans, catching everything from outdated software to complex misconfigurations. It's quick, efficient, and can be installed almost anywhere, which is a huge plus. The free version for personal use, covering up to 16 hosts, is more than enough for home networks or small businesses to get started.

Nachteile:

No cons I can think of. It has all the features that a decent vulnerability scanner should have.

Nessus: Vulnerability Scanner with Appealing Reporting Capabilities

Kommentare: Nessus is a must for network security testing and vulnerability analysis. Together with Nmap, Nessus gives a much better penetration testing and vulnerability analysis of networks and virtualized cloud infrastructures.

Vorteile:

I used Nessus with nmap for testing the vulnerability of virtualized networks in controlled environments. The main motivation behind the selection of Nessus is to have a user-friendly vulnerability report with categorized network exploits and OS weaknesses. Nessus provides accurate results (though some false positives are noticed in hardened Linux environments). The advanced reporting capabilities in Nessus makes the vulnerability results easily exported and documented to relational databases. Moreover, the various Nessus reports can be compared after hardening the OS with different security configurations.

Nachteile:

Nessus is very accurate but sometimes, especially with latest versions of Ubuntu, many false positives are noticed. Still Nessus results are considered highly informative and the false positives can be autonomously filtered to provide more accurate vulnerability analysis and reporting.

A good product to scan vulnerability but it's expensive

Vorteile:

Nessus allows you to have vulnerability dashboards and allows rapid remediation

Nachteile:

nessus is complicated to configure but also is a fairly expensive product

Great product. Nessus is an industry leader for a reason.

Vorteile:

Nessus provides very valuable insight into network vulnerabilities and the remediation required to address the vulnerabilities. Nessus is and has been an industry leader for along time and is tried, tested, and true. Very good program that helps keep industries safe.

Nachteile:

Nessus can be cost prohibitive and difficult to initially setup. Having employees with good technical knowledge will be important if implementing Nessus software, otherwise, outsourcing is a good option as well.

Our auditors love Nessus Professional

Vorteile:

We love the overall ease of use and the amount of details that scans have along with the findings for quick remediation. Our auditors love the reporting.

Nachteile:

Sometimes there are limitations in the scan exclusions. We would also like to see integrations with ticketing systems.

Nessus Review

Vorteile:

I like the ability to scan everything on the network and get a report on vulnerabilities.

Nachteile:

Sometimes the vulnerability scan is a little too picky.

One of the most valid Vulnerability Scanners

Vorteile:

Among the strong points of Nessus we can certainly mention its user-friendliness, the easy deployment, and the very accurate reporting.

Nachteile:

The only flaw of Nessus is that if you don't purchase the "Tenable Web App Scanning" subscription, doing authenticated scans on web apps (especially if they implement authentication mechanisms such as SSO) presents problems, since even specifying credentials (or cookies) it can happen that Nessus fails to authenticate.

Conduct vulnerability and compliance scans to protect infrastruture

Vorteile:

Nessus proved to be an effective solution for identifying potential security weaknesses and ensuring compliance across our infrastructure. With advanced detection techniques and detailed reporting capabilities, Nessus facilitated streamlined remediation of identified issues.

Nachteile:

For a small organization, the cost of the product can be too high to bear. At times the most recent CIS benchmarks may not be available to conduct compliance scans.

Nessus Scan - A tool to start your test with.

Kommentare: Great tool to meet sudden deadlines and effective reconn tool for Network penetration testing.

Vorteile:

This software is great for new bees and profressionals in network penetration testing. I would like to share some highlights and good points I feel: 1. The UI is really good and easy to use. 2. The results are shown in an organized manner. 3. Reports can be easily shared with excel exports. 4. Vulebrabilities are prioritized for you with Critical, High, Medium and Low. (CVEs results) 5. Scheduling time and date. 6. Sharing it with the team - nice access management.

Nachteile:

With the product proven to be great, some drawbacks of this product are: 1. False Positives are present, and its not your only tool to rely for a pentest. 2. It is not a web application scanner, its mainly a network scan. So if you are expecting to work like any other web app OWASP scanner, its not.

One of the best vulnerability scanners

Kommentare: Nessus has allowed us in the company to develop a timely remediation system, since with the results of the scanners our clients can manage the remediation in a more timely manner without needing to apply more invasive policies on the client. Additionally it has helped us that the scans can be done in a short period of time in comparison to others in the market and in this way improve our service.

Vorteile:

This product is one of the best network scanners on the market. After properly installing the server with the scanner in the network and placing the credentials of the administrator, the system works perfectly. Vulnerability scanning and compliance scanning are executed properly, all the standards included in Nessus are very useful.

Nachteile:

The vulnerability scanner is not totally accurate in some situations and some results must be checked to verify the vulnerability. Therefore, it is possible that there are false positives. Many times the supplements are not updated in a timely manner and this hurts even more with the false positives generated.

Nessus An Excellent Tool For The Vulnerability Management Process Of Any Company.

Kommentare: Nessus it’s an excellent tool for the vulnerability management process of any company. Its super easy to use and implement on any network, and the tenable university and the community it’s a plus that make it even easier. There are many way how to export the result of any scan, but the best are in HTML and PDF, because are easy to understand and explain to any person. I really like it and going to continue using it

Vorteile:

That it was really easy to implement and use

Nachteile:

The reports are very basic and need to improve.

Easy to Use Vulnerability Scanner

Kommentare: Good canned reports and dashboards, which show where your critical risks are. Ability to export date into CSV or Excel format was welcome and made manipulating data easier.

Vorteile:

What I like most about Nessus is that they have many plugins available for the various vulnerabilities that are out there. The ability to scan static and dynamic asset lists is great. The ability to schedule recurring scan jobs is helpful and aids in the scanning of systems. Integration with ticketing systems such as ServiceNow is also great.

Nachteile:

It would be nice if their website had the published or revised date of their plugins. Resolving issues related to their Nessus Agents would also be nice. The UI could be improved so that queries didn't take so long. It would be nice if there was an easy way to purge old data associated with particular IPs.

Scanning for vulnerabilities

Kommentare: Even though it is time consuming when a scan is running, the end result is pretty amazing. It's great using Nessus.

Vorteile:

I use this scanner often to scan web application and also to run other scans. It provides the best results and it is really helpful as this also saves some time. There's are variety of scanning types available in this scanner and after scanning it gives a full report including the url when scanning a web application.

Nachteile:

It takes a really long time when doing a scan but

THE vulnerability scanning software to beat

Vorteile:

Nessus is the gold standard of vulnerability scanning. A robust solution, highly customizable for every organization with cloud, on prem and client install options.

Nachteile:

Without the local client or group policy that shuts off wifi when your on wired you may get hit with 2 licenses per device because it sees both the wireless and wired instance. Something to know going into it if you are buying.

Effectiveness

Kommentare: I have a very good experience with Nessus . I highly recommend it.

Vorteile:

This is a one of best software for the vulnerability assessments. It ha lot of functions and features to do the tasks.

Nachteile:

Sometimes it's getting slow to conduct the scans and also I think it need to contain more attractive reporting methods.

Excellent Visibility

Kommentare: Vulnerability assessments in client domains both internal and external have been highly simplified with the usage of Nessus, making security recommendations easier.

Vorteile:

It is relatively straightforward to scan an entire enterprise network due to the ease-of-use with the policies that are available. Customized creation enhances the overall process.

Nachteile:

Configuration expertise is required when it comes to specifically tailored assessments in separate domains. This can be slightly tedious with expected results; but once you get it right, the scans are highly effective.

Vulnerability scanning at its finest

Kommentare: Very happy we purchased and implemented this software. It allows you to be proactive in locating vulnerabilities on the network and patching them before something bad happens. Well worth the cost.

Vorteile:

Ease of use and simplicity. Rarely have had to reference online documentation. They make it very easy to figure out and use right away. For more specific sets of scans or devices, the documentation is helpful. There is also a very active community on their forums. Reporting is very informative, and scheduling makes it so you don't have to interact much after everything is all set.

Nachteile:

Sometimes there are some false positives that take time to realize. Also seems to think many of the things they mark as medium risk are low risk. This depends on your situation and network, but for me most of the medium risks can be disregarded.

excellent tool to mitigate security breaches

Kommentare: With this software it is possible to perform network analysis to determine if there are vulnerabilities in the systems, malware, among other types of ramsomware. It also allows analyzing web environments and ensuring that companies know what threats and vulnerabilities are present in their information assets.

Vorteile:

That I can analyze networks, web applications, elements in the cloud and customize the type of output or analysis that will be executed, either manually or I can program it. Additionally I like the section to make scanners and comply with PCI policies.

Nachteile:

So far the tool has covered my expectations. So far the tool has covered my expectations. I usually use it to perform advanced scans where I can select which elements I want to enable.

Best tool for vulnerability scanning

Kommentare: Overall very helpful to understand your network security posture. Value for money at enterprise level.

Vorteile:

Very handy, powerful and easy to use software for vulnerability scanning. This can be also utilize for web application scanning and system configuration review. One can schedule the scanning and get the report. It gives standard and custom reports which are helpful for presentation purpose. Nessus scanning reports suggest the required patch for their respective vulnerabilities. To get the best possible result plugins should be up to date with latest release.

Nachteile:

Report doesn't show in graphical format. It doesn't scan system with 2FA enabled.

Great Vulnerability Management Solution

Kommentare: Tenable offers great vulnerability management products and Security Center is very easy to use. Great reporting capabilities and an overall great product.

Vorteile:

Ease of use Reporting

Nachteile:

Lacking in application security

Scanning and reporting by setting a schedule

Vorteile:

We have an amazing scanning functionality with NESSUS and it's scheduled so all I have to do is look at the report then can use that to report to the committees

Nachteile:

It can be troublesome to setup the very first time but when it is set up it is a breeze to use