Nessus (BYOL)
Tenable, Inc. | 10.7.2Linux/Unix, Amazon Linux 20240318 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Good overall product with room for improvement
What do you like best about the product?
Nessus includes some good functionality to enable integration with a larger suite of vulnerability management systems and help facilitate some light automation. The performance is generally consistent and the interface is intuitive and easy to use.
What do you dislike about the product?
The plugins are not always updated in a timely fashion, which results in unnecessary false positives and time spent researching and documenting. The API functionality is tied to a Tenable.io subscription, limiting automation and integration to the more expensive subscription model, and the accompanying analytics are superficial and don't tie to good key risk indicators.
What problems is the product solving and how is that benefiting you?
As a consultant, I'm helping my clients assess where they may have shortfalls in their vulnerability management, patch management, and system hardening programs. The overall ease of use and ability to deploy remote virtual systems allows us to work with clients without being on site the entire time, improving our efficiency and controlling costs.
- Leave a Comment |
- Mark review as helpful
Nessus is Cool
What do you like best about the product?
Good detection capabilities. Easy to understand results.
What do you dislike about the product?
The removal of the API and multi-users in Nessus Pro.
Starting to get a little messy with where plug-ins are grouped.
Starting to get a little messy with where plug-ins are grouped.
What problems is the product solving and how is that benefiting you?
Vulnerability scanning.
Dropping API support was a bad decision
What do you like best about the product?
Scans are through and provide links to explanations and corrective actions.
What do you dislike about the product?
Dropping the API support in the latest version renders our Powershell automated scans useless.
What problems is the product solving and how is that benefiting you?
Assuring our products are secure from hacking.
Nessus Professional
What do you like best about the product?
The best thing about Nessus is how indepth the scans can be. Not only are they indepth, there are multiple different scans preset for convenience. Not only that there are a ton of customization options for reports, scheduling, notifications, the type of scan and even the plugins.
What do you dislike about the product?
Migrating Nessus to a new machine isn't the easiest thing to do as there are some restrictions but after doing them a couple of times, I've gotten used to it. Depending on how many scans you have on your original build, migration can take a long time to complete. If something goes wrong, all of that time would have been wasted.
What problems is the product solving and how is that benefiting you?
A big benefit with Nessus is that we are able to pinpoint security risks within our own sites and servers on a monthly basis and escalate to the proper teams within our organization. The scans can be setup to send emails of the pdf file of the scan report to individuals. This allows the proper people are receiving the results as soon as the scans are complete.
Recommendations to others considering the product:
If you are in need of a vulnerability scanner, Nessus is definitely the way to go. The ease of customization and the level of support you get from Nessus makes this the best option.
Very good product
What do you like best about the product?
We are able to perform weekly scans and store them for future reference
What do you dislike about the product?
There is not much to dislike about the product.
What problems is the product solving and how is that benefiting you?
We are using the plugins to ensure that we are in compliance with the FDCC guidelines.
Recommendations to others considering the product:
I have used it for years and it has improved a lot over the past few years.
Nessus Keeps Us Safe
What do you like best about the product?
Nessus is easy to use and scans for a large number of vulnerabilities. It helps us to keep one step ahead.
What do you dislike about the product?
The initial install of Nessus tends to be a little slow when downloading and compiling plugins. Other than that once the product is up and running everything is good.
What problems is the product solving and how is that benefiting you?
We use Nessus to perform daily scans. It helps us stay on top of new and existing vulnerabilities as well as identify any patching issues that may have been overlooked.
Recommendations to others considering the product:
Buy it and use it daily.
great piece of mind
What do you like best about the product?
simplicity of building out a customized scan
What do you dislike about the product?
better looking results, built in data that doesn't require going out to web for details
What problems is the product solving and how is that benefiting you?
security scans needed to verify new systems have been hardened
Tenable Nessus Professional Review
What do you like best about the product?
Nessus Professional has many wonderful features. Some these features include the ability to view vulnerability information related to system that reside on your network. It gives you information about how to remediate these reviews. We use Nessus in an active and passive manner. We do have ICS based systems that do no work well with active scans. In these instances we can set up a passive Nessus scanner and collect the information that we need. It is also helps to in providing a secondary means to identify and verify the patching of our systems.
What do you dislike about the product?
We use Nessus Professional as a part of our Tenable SC CV suite. This can be a little difficult to get up and running the first time it is set up. There are multiple virtual appliances that have to bet set up and synced together and if there is ever a problem, sometimes this it can take some time to track down which particular component is the issue. If Nessus Professional is used as standalone product, this isn't an issue.
What problems is the product solving and how is that benefiting you?
It has helped in reducing cost associated with working individually on each device we have. We trust Nessus to perform automated tasks that would normally take hours on end to perform this type of audits by hand. So with that, we have seen a reduction in labor costs and time.
Recommendations to others considering the product:
Be prepared to spend some time on the front end designing and setting this up properly to avoid headaches down the road.
Positive Experience
What do you like best about the product?
- Security Center's ease of use while providing useful information.
- Interface is very user friendly
- Updating policies and scans are simple
- Creating queries is extremely easy
- Interface is very user friendly
- Updating policies and scans are simple
- Creating queries is extremely easy
What do you dislike about the product?
Honestly, there isn't much I don't like. I've been very pleased with Nessus overall. My only complaint is with the detection of the HSTS plugin (84502). It is something we are audited on and it simply never goes away without manual intervention. It be great to see this work better.
- Creating reports can be very time consuming and difficult. They're not bad, it just takes a lot of back and forth to make sure you are getting the data you need displayed in a manner that makes sense.
- Creating reports can be very time consuming and difficult. They're not bad, it just takes a lot of back and forth to make sure you are getting the data you need displayed in a manner that makes sense.
What problems is the product solving and how is that benefiting you?
Deprecated protocols and services. Additionally, able to scan systems for baseline configurations and ensure they within compliance
Recommendations to others considering the product:
SecurityCenter makes your job in Security much easier, the interfaces are great and the reports are excellent to provide to upper management. As we know, management loves graphs.
Great tool...simple, intuitive, and complete
What do you like best about the product?
Nessus is my go-to scanner. It's simple to use...has a well laid out user interface...and results are easy to digest. The references withing the vulnerability findings are immensely helpful to support staff in helping them to understand the findings and their path to remediation.
What do you dislike about the product?
Not really much to dislike here. Price is right. Ease of use is great. Only thing I'd recommend is for Tenable to step up their game with Support. Their support process is one of the least engage-able of all the tools I use. Much more feels like consumer level support rather than enterprise.
What problems is the product solving and how is that benefiting you?
Verifying patch management process is the primary solution we are solving. Is also great at asset discovery. We also find the scanner very useful when a new high priority vulnerability comes out that the business wants us to quickly verify our exposure to.
Recommendations to others considering the product:
none at this time
showing 241 - 250