Lansweeper - Network Discovery and IT Asset Management Software
Lansweeper is an IT asset
management solution that provides network…
$1
per year per asset
Tenable Nessus
Score 8.3 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
Lansweeper I believe is well suited for any environment - its low cost and small footprint make it an easy addition to any organization, big or small, that is looking for an asset inventory solution that can either replace or supplement existing asset management systems. It may not be well suited for situations where a lot of customization is necessary, such as pulling in custom fields or details from equipment that don't reside in a registry.
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Inventory - LANSweeper scans the network for devices - anything with an SNMP trap or using AD or local credentials. We can get an in-depth look at devices.
Reporting - LANSweeper can generate just about any report you can imagine. We can check RAM in groups and determine where upgrades are needed. We can find local printers (which aren't allowed on our network) and address that issue with the user. We can check CPU type to help determine end of life without our network.
Printers - It's nice to have a quick look at printer statuses. Toner levels, out of paper, and service errors are all reported via LANSweeper.
With Nessus we can find the missing critical patches for a server or workstations.
Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
Can only scan what it sees. Doesn't show every item on the machine. Patches are also absent.
Software Recognition is OK with Microsoft. It is dire within our network of multiple products. Recognition is at about 35% with constant manual work needed to baseline for each manufacturer in each network
Datacenter compliance is a manual project. We used Excel extensively.
License optimization is limited to installations v surplus licenses. We need to know who's using what and how.
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Lots of info online there are tons of SQL Reports you can copy from the web as Lansweeper and users post many of them. They also send out alerts that pop up on Lansweeper, letting you know of an update that you need for certain software and provide an SQL report so you can scan your system to see what PCs need this update.
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
Microsoft System Center needs to install agents on all IT asset for discovery and sometimes the agents can easily get corrupted. Lansweeper is a SaaS solution and it's easier to deploy to all IT asset that are connected to the network. This save us a lot of deployment time without the need to engage vendor for professional service.
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
It had a positive impact on solutions expense cause several teams we're using different solutions with different costs that used several servers and DB resources. Now, we've been able to simply that a lot with Lansweeper.
With my previous point, people had to train and learn about each of their solutions. Now we can put a team in charge and so the other teams can focus on other tasks.
Last year Lansweeper changed their licencing prices a lot so it slashed our budget.
Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
