Re: Vulnerability scanners

Mh... I believe there are many other costs involved. Does Qualys provide source code to signatures? What is the cost (time/resources) of investigating false positives without this information?

On the other hand, with commercial products you have someone to blame if the performance or results of a product are not satisfactory (based on a contract), however, no matter how excelent nessus is, there is no one forced to give you support with nessus (unless you buy support from another company; I also believe Renaud Deraison was working on a distributed nessus architecture that might be based on appliances and provide you with commercial support but I'm not sure).

Omar

> Yesterday some reps from Qualys came with a sales

top spam and e-mail risk at the gateway. SurfControl E-mail Filter puts the brakes on spam & viruses and gives you the reports to prove it. See exactly how much junk never even makes it in the door. Free 30-day trial: http://www.surfcontrol.com/go/zsfptl1 Received on Thu Mar 27 15:46:29 2003