Cisco TrustSec vs. SUSE Security vs. Tenable Cloud Security

• Control access to critical enterprise resources by business role, device type, and location, so policy changes can be made without redesigning the network.
• Easily manage access control and segmentation while maintaining compliance.
• Create and manage policies in an easy-to-use matrix.
• Reduce the need for costly network re-architecture by automating firewall rules and access control list (ACL) administration.

Incentivized

SUSE NeuVector is exceptional when you want to make your Kubernetes cluster secure. You can limit network connections, scan containers, container registries and Kubernetes nodes for vulnerable software, forbid running specific commands on certain or all containers. You can enable security for individual containers - when SUSE NeuVector has learned container specifics. That's why you can deploy SUSE NeuVector on production Kubernetes clusters where you are already running conteiners - it will not break anything.

In its current version, it is basic. There are nice new features that should provide a good overall picture of the configuration and security of the account.

Incentivized

• Reduce operational expenses by simplifying network segmentation and defining security groups based on business roles, not IP addresses.
• Limit the impact of a data breach by quickly isolating and containing threats using technology already in your network.

Incentivized

• Scans containers software for known vulnerabilities
• Denies command execution in containers
• Prevents unwanted network connections from/to containers

• Easy to connect to cloud account
• Provides basic configuration details or account, networking, what's public

Incentivized

• Help and solutions if needed, support

Incentivized

• I like everything about NeuVector. They are on the right development path.

• Difficult to attribute the vulnerabilities to the correct instance - cloud is too dynamic. Is supposed to be fixed in new version - we will see.

Incentivized

SUSE NeuVector is deployed on your Kubernetes, and data does not leave your data center. Sysdig is a cloud platform - you have no full control over what happens with your data. Also, SUSE NeuVector has a capability to prevent specific command execution ir containers, but Sysdig does not have such ability. Sysdig is not an open-source solution, but SUSE NeuVector is.

We looked at this over a year ago, the space was still young. Censys provided what we originally needed, but was soon outdone by Tenable with their initial release. I am sure that Censys improved as well, but it was easier to expand on our current Tenable license.

Incentivized

• Reduction in IT operational costs

Incentivized

• We went from being blind to what happens in the Kubernetes network to seeing everything and being able to control Kubernetes network communications.
• Now we are able to detect vulnerable containers faster.

• Being a Tenable One customer - these are just new features we suddenly own. As long as you have the asset count available

Incentivized