[unisog] Replace or Purchase Nessus?

[Trevor Odonnal]

Thank you.

--------------------------------------
Trevor O'Donnal CISSP, CCFS, GREM
Network Security Analyst
Brigham Young University
(801) 422-1477
trevoro at byu.edu

-----Original Message-----
From: unisog-bounces at lists.dshield.org [mailto:unisog-bounces at lists.dshield.org] On Behalf Of Harvard Townsend
Sent: Wednesday, June 11, 2008 1:34 PM
To: UNIversity Security Operations Group
Subject: Re: [unisog] Replace or Purchase Nessus?

Apparently universities have to pay - see the FAQ:
http://www.nessus.org/documentation/index.php?doc=feed-faq#anchor8_1
--
Harvard Townsend
University IT Security Officer
Kansas State University
Email: harv at ksu.edu,  Voice: 785-532-2985

On 6/11/2008 2:08 PM, Trevor Odonnal wrote:
> Actually, as I read the notice more carefully, it seems that Universities may be able to get a free subscription.  I quote from the notice:
>
> "Additionally, we understand that there are those in the Nessus community that serve broad social and
> educational objectives and we want to make certain that qualified charitable and information security
> teaching/training organizations have access to the ProfessionalFeed free of charge. To this end, Tenable will
> provide ProfessionalFeed subscriptions to charity and teaching/training organizations at no cost for those
> that qualify."
>
> We are exploring this option.  I'll let you all know what we find out.
>
> --------------------------------------
> Trevor O'Donnal CISSP, CCFS, GREM
> Network Security Analyst
> Brigham Young University
> (801) 422-1477
> trevoro at byu.edu
> -----Original Message-----
> From: unisog-bounces at lists.dshield.org [mailto:unisog-bounces at lists.dshield.org] On Behalf Of Kim Cary
> Sent: Wednesday, June 11, 2008 12:18 PM
> To: unisog at lists.dshield.org
> Subject: [unisog] Replace or Purchase Nessus?
>
> Colleagues,
>
> Now that Tenable will charge Universities for Nessus plug-in feeds, my
> first thought is to evaluate vulnerability scanners. We scan our
> Internet server zones weekly alternating weeks between internal and
> external scans. Scans of datacenters are scheduled and ad hoc for
> individual machines when questions arise (yah, your machine better be
> able to be scanned with 'safe' plug-ins).
>
> Is anyone continuing with Nessus under the paid model? Other scanners
> you like for our environment (low budget)?
>
> Cheers,
> KC
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org
> https://lists.sans.org/mailman/listinfo/unisog
>
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org
> https://lists.sans.org/mailman/listinfo/unisog
>
_______________________________________________
unisog mailing list
unisog at lists.dshield.org
https://lists.sans.org/mailman/listinfo/unisog