BMC Helix Client Management vs. Tenable Nessus

This tool will work the best in homogeneous environment where systems are running on Windows OS. In heterogeneous environment like ours where we have Windows, Linux and OS X operating systems, roll out and integration will be a challenge since not all the systems will have accessibility from a common credential

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• Easy to use
• Easy to upgrade
• Highly flexible without customization
• Great community/support
• Patch management provides the flexibility to deploy patches using a test to production methodology. It also allows us to customize restart actions which helps with compliance but eases disruption to the business.
• Computer imaging and software deployment work together to improve speed to delivery.
• Financial asset management is very useful providing all of the information we need to support our PC replacement process.

• With Nessus we can find the missing critical patches for a server or workstations.
• Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
• Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
• Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.

Incentivized

• It would be nice if it were possible to export search results
• Schedule my reports to automatically, run at intervals of my choosing with the results either emailed or dumped to disk as a CSV
• Easy report writing

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.

Incentivized

The process followed by the support team for incidents as well as support requests will become bottleneck for dynamically growing organisations as nothing works fast from a support point of view. A few of the requirements that we asked for took more time to execute and most of them came with a cost.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

As we decided to go for BMC Remedy for ITSM, BMC Helix Client Management was the better solution than other tools for ITAM solution as integrating ITAM and ITSM was easier than other tools and also from support point of view, it will be one throat to choke. The reporting module was elaborate and customisable.

Incentivized

Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.

Incentivized

• BMC Client Management has improved our speed to delivery, quality of service and security by providing the necessary automation tools to improve our processes.

• Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
• The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
• Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.

Incentivized