Re: Online Scanning Services Vrs. Stand Alone Applications

IMHO i have not heard about any comparison except bunch of sales pitch. i do agree with danny that depending on the size of your pipe, it's not only cost prohibitive but also resource hog.

it's nice that someone outside could do that for you and for you to open up ports for them to scan the internal networks via vpn tunnel, and of course you're getting an outside opinion, but tools like nessus, you could setup a nessus client at various parts of your network subnet or your vlans and have those remote agents send back the findings to the nessus server (perhaps with mysql backend for later correlation analysis).

i say there is too many to choose from the menu, but choosing the resturant would depend on your budget and taste (or what you're used to, etc...).

just my .02

gene

Danny wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----

-- 
<>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iQCUAwUBPhxERRxoVYCzmrKXAQJK5gP3Y7CTsFyKpEz2p5W4GWI9+qSm+kWfdJ0R
xNlma0Ma9rAL/OBJcZMo5IXyXas+3Edogbv4Al6dIf8lot1WS0Iaxxl/cg2f7gf+
otf7LfNpZDE/6OzR7A1qN6baPMLSjGzywwQWMfSVuWWb6kGQxMsA13Kn68G7Ozxs
5CODZqUPyg==
=AolA
-----END PGP SIGNATURE-----



----------------------------------------------------------------------------
Do you know the base address of the Global Offset Table (GOT) on a Solaris 8 box?
CORE IMPACT does.
http://www.securityfocus.com/core"> 
http://www.securityfocus.com/core