ManageEngine Endpoint Central vs. Tenable Nessus

ManageEngine Endpoint Central is fantastic for a set and forget patching tool. This is great for the Windows clients that we have and provides good reporting and ensures machines are kept up to date and gives us good reporting on which machines are vulnerable in our organisation. Linux machines are not as well handled due to the multiple flavours of Linux that are out there. ManageEngine Endpoint Central only manages specific versions of Mac and Linux so it is best to check compatability ahead of time.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• Patch Management is very easy to use and deploy patches each month
• Inventory Reporting is straight forward with multiple premade reports available
• Remote Connections are very simple to use, it only takes 15 seconds to find and connect to a device.
• Software Deployment and the Self serviceportal give you multiple ways of deploying your apps.

Incentivized

• With Nessus we can find the missing critical patches for a server or workstations.
• Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
• Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
• Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.

Incentivized

• More granular access level controls for technicians (restrictions for juniors) on the Mobile Device Management add-on
• Monitoring mobile data usage on mobile devices, this has been in the product pipeline for 5 years, but not yet implemented
• Ability to remotely support company-owned mobile devices with no end-user permission. End-user needs to allow the remote session, when sometimes that's what we don't want since we're doing an investigation.

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

ManageEngine is considered an excellent product due to its comprehensive suite of solutions for IT management, with ManageEngine Endpoint Central specifically excelling in endpoint management. The platform stands out for its user-friendly interface, robust features, and versatility in addressing diverse IT needs. It offers organizations a centralized solution for endpoint security, patch management, software deployment, and asset management

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

Great product, very easy to use. Does exactly what we want without any fuss. The interface could be a bit more modern and less cluttered but overall functionality is excellent. Once you're familiar with the menus it's easy enough to get around and do what's needed. We're very happy with the product.

Incentivized

It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.

Incentivized

The local distributor of the product is always available, however most support is received within an hour from India. We've had complex requirements and the support team went so far as to customize their mobile application to suit our unique needs. We honestly can't complain about any support we've received and it's always been very quick.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

WSUS (provided by Microsoft) is a MUCH inferior product, no flexibility at all, updates when it wants and how it wants and was generally not suit for purpose. In addition, endpoint offers all the other functionality that WSUS doesn't (as said earlier in my review, remote control, endpoint security and much more).

Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.

Incentivized

• Reporting makes displaying information (such as patch status, age of devices) to the board of directors incredibly easy.
• During a blue screen of death event, the OS Deployment functionality allowed us to re-image all of our 70+ laptops in one day's time.

Incentivized

• Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
• The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
• Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.

Incentivized