Security Scanners

Hey there,

Anyone use a Server and network security sanner other than MBSA to sacn your
networks?

If so what products are available for free and for purchase? In your opinion
what is the best scanner out there?

Thanks in Advance.

-Adam

Miha
Tue Feb 07 10:27:24 CST 2006

Hi Adam,



It is hard to tell which one is best. You would have to be more specific --
best on what? For some tasks nmap is best and for other (specific) tasks
there are other scanners that do job better (e.g. Retina Network Security
Scanner, ISS, GFI...)



http://www.eeye.com/html/products/retina/index.html
http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
http://www.gfi.com/lannetscan/
http://www.insecure.org/nmap/

--
Mike
Microsoft MVP - Windows Security

"Adam" <Adam@discussions.microsoft.com> wrote in message
news:39568D84-BBC8-4DA8-A64C-978EC5186A56@microsoft.com...
> Hey there,
>
> Anyone use a Server and network security sanner other than MBSA to sacn
> your
> networks?
>
> If so what products are available for free and for purchase? In your
> opinion
> what is the best scanner out there?
>
> Thanks in Advance.
>
> -Adam

Adam
Tue Feb 07 10:51:36 CST 2006

Thanks for your reply.

I'm most concerned with Windows Server based security - 2k and 2k3. Mainly
for security vulnerabilities, security weaknesses, and open
shares/ports/services that can be compromised.

If a tool will also check network devices as well as the windows boxes, that
would be good too.

-Adam

"Miha Pihler [MVP]" wrote:

> Hi Adam,
>
>
>
> It is hard to tell which one is best. You would have to be more specific --
> best on what? For some tasks nmap is best and for other (specific) tasks
> there are other scanners that do job better (e.g. Retina Network Security
> Scanner, ISS, GFI...)
>
>
>
> http://www.eeye.com/html/products/retina/index.html
> http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
> http://www.gfi.com/lannetscan/
> http://www.insecure.org/nmap/
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Adam" <Adam@discussions.microsoft.com> wrote in message
> news:39568D84-BBC8-4DA8-A64C-978EC5186A56@microsoft.com...
> > Hey there,
> >
> > Anyone use a Server and network security sanner other than MBSA to sacn
> > your
> > networks?
> >
> > If so what products are available for free and for purchase? In your
> > opinion
> > what is the best scanner out there?
> >
> > Thanks in Advance.
> >
> > -Adam
>
>
>

Miha
Tue Feb 07 11:14:25 CST 2006

My best sugestion would be to try these three:

- http://www.eeye.com/html/products/retina/index.html
-
http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
- http://www.gfi.com/lannetscan/

and see which one works best for you. There are also other scanners and I am
sure others will suggest them - so try out those too.

--
Mike
Microsoft MVP - Windows Security

"Adam" <Adam@discussions.microsoft.com> wrote in message
news:F9ED5DC7-4650-4DC6-A9AC-B920F085CC6B@microsoft.com...
> Thanks for your reply.
>
> I'm most concerned with Windows Server based security - 2k and 2k3. Mainly
> for security vulnerabilities, security weaknesses, and open
> shares/ports/services that can be compromised.
>
> If a tool will also check network devices as well as the windows boxes,
> that
> would be good too.
>
> -Adam
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi Adam,
>>
>>
>>
>> It is hard to tell which one is best. You would have to be more
>> specific --
>> best on what? For some tasks nmap is best and for other (specific) tasks
>> there are other scanners that do job better (e.g. Retina Network Security
>> Scanner, ISS, GFI...)
>>
>>
>>
>> http://www.eeye.com/html/products/retina/index.html
>> http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
>> http://www.gfi.com/lannetscan/
>> http://www.insecure.org/nmap/
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "Adam" <Adam@discussions.microsoft.com> wrote in message
>> news:39568D84-BBC8-4DA8-A64C-978EC5186A56@microsoft.com...
>> > Hey there,
>> >
>> > Anyone use a Server and network security sanner other than MBSA to sacn
>> > your
>> > networks?
>> >
>> > If so what products are available for free and for purchase? In your
>> > opinion
>> > what is the best scanner out there?
>> >
>> > Thanks in Advance.
>> >
>> > -Adam
>>
>>
>>

Adam
Tue Feb 07 11:22:26 CST 2006

Mike,

Thanks so much for your help! I really appriciate it.

-Adam

"Miha Pihler [MVP]" wrote:

> My best sugestion would be to try these three:
>
> - http://www.eeye.com/html/products/retina/index.html
> -
> http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
> - http://www.gfi.com/lannetscan/
>
> and see which one works best for you. There are also other scanners and I am
> sure others will suggest them - so try out those too.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Adam" <Adam@discussions.microsoft.com> wrote in message
> news:F9ED5DC7-4650-4DC6-A9AC-B920F085CC6B@microsoft.com...
> > Thanks for your reply.
> >
> > I'm most concerned with Windows Server based security - 2k and 2k3. Mainly
> > for security vulnerabilities, security weaknesses, and open
> > shares/ports/services that can be compromised.
> >
> > If a tool will also check network devices as well as the windows boxes,
> > that
> > would be good too.
> >
> > -Adam
> >
> > "Miha Pihler [MVP]" wrote:
> >
> >> Hi Adam,
> >>
> >>
> >>
> >> It is hard to tell which one is best. You would have to be more
> >> specific --
> >> best on what? For some tasks nmap is best and for other (specific) tasks
> >> there are other scanners that do job better (e.g. Retina Network Security
> >> Scanner, ISS, GFI...)
> >>
> >>
> >>
> >> http://www.eeye.com/html/products/retina/index.html
> >> http://www.iss.net/products_services/enterprise_protection/vulnerability_assessment/scanner_internet.php
> >> http://www.gfi.com/lannetscan/
> >> http://www.insecure.org/nmap/
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >> "Adam" <Adam@discussions.microsoft.com> wrote in message
> >> news:39568D84-BBC8-4DA8-A64C-978EC5186A56@microsoft.com...
> >> > Hey there,
> >> >
> >> > Anyone use a Server and network security sanner other than MBSA to sacn
> >> > your
> >> > networks?
> >> >
> >> > If so what products are available for free and for purchase? In your
> >> > opinion
> >> > what is the best scanner out there?
> >> >
> >> > Thanks in Advance.
> >> >
> >> > -Adam
> >>
> >>
> >>
>
>
>

David
Tue Feb 07 11:48:39 CST 2006

From: "Adam" <Adam@discussions.microsoft.com>

| Hey there,
|
| Anyone use a Server and network security sanner other than MBSA to sacn your
| networks?
|
| If so what products are available for free and for purchase? In your opinion
| what is the best scanner out there?
|
| Thanks in Advance.
|
| -Adam

You mean like Harris STAT or Digital eEye Retina.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Yuri
Wed Feb 08 13:57:56 CST 2006

Hi Adam, below are few resources with more extensive coverage
of the subject should you need more info. I have only used Nessus so far and
would
recommend it for being free of charge, customizable , widely accepted,stable
in action, easy to use but having one "but" - it runs on Linux-like OSs only
(while can be managed from the Windows front-end) . There's no free
vulnerabilities scanner that is as nearly as good as it is as of now. The
commercial ones , mostly Windows-based , vary in their capabilities and
prices so much that I'd find it hard to pick the only one had I been
required to from specs only.
So there're opinions of more knowledgeable people:

General introduction :
http://netsecurity.about.com/cs/hackertools/a/aa030404.htm

"VA Scanners Pinpoint Your Weak Spots" - comparative review of 11 scanners.
http://www.networkcomputing.com/showitem.jhtml?articleID=15000643&pgno=1


"Vulnerability assessment scanners", 2001 - while the conclusions are
somewhat outdated, many things have changed , but the approach in testing
products is very much applicable today.

http://www.networkcomputing.com/1201/1201f1b1.html

Yuri.

"Adam" <Adam@discussions.microsoft.com> wrote in message
news:39568D84-BBC8-4DA8-A64C-978EC5186A56@microsoft.com...
> Hey there,
> Anyone use a Server and network security sanner other than MBSA to sacn
your
> networks?
> If so what products are available for free and for purchase? In your
opinion
> what is the best scanner out there?
> > Thanks in Advance.
>
> -Adam


begin 666 blank.gif
K1TE&.#EA`0`!`( ``/___P```"'Y! $`````+ `````!``$```("1 $`.P``
`
end