McAfee Foundstone (discontinued) vs. Tenable Vulnerability Management

It is well suited for big organizations like banks and multi nationals who can afford the cost and data security is high priority and highly desired. Whereas it is not well suited for small organizations with little budget. There should be product models where it can provide cost effective solutions for small organisations as well.

Incentivized

Tenable.io is a cost effective Internal and External scanner. The Internal scanner came with a .ova, so it was very simple and quick to deploy it into our ESXi environment. It has a cloud-based dashboard for management and the internal scanner is configured to auto-update from Tenable.io. The license came with 4 External PCI scans (with remediation) a year.

Incentivized

• It identify and report security breaches
• It secures VPN access
• Wireless network security is optimized
• Voip security risks are addressed

Incentivized

• Wide range of capabilities that can be customized to fit each user's environment and needs
• Provides high-quality data and insights into detected vulnerabilities
• Great customer support

Incentivized

• Although it has lot of artificial intelligence to identify risks and threats, it should stop any attack or information gathering from intruders
• It utilizes lot of system resources, it should be improved
• It makes system slow, it should be addressed

Incentivized

• Configuration is not always intuitive, but the comprehensive training and documentation comes to the rescue.
• The mix of classic and beta UIs currently is confusing and we find the classic UI is actually better.

Incentivized

We like to renew tenable each year we have had it so far.

Incentivized

Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.

Incentivized

Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)

Incentivized

I have found Mcafee as one of the best security software as compare to the others. The other security products I have used so far are Norton utilities, Symantec. Kaspersky, avg, avast. one of the reason for mcafee being better is that it does not bother the user every time for system check or fake warnings.

Incentivized

I think Tenable and Qualys have a lot of similarities, I continue to go back to Tenable because of my familiarity and comfort level with it. I've also used a company called SecurityMetrics which has vulnerability scanning included but it is not as comprehensive as Tenable.

Incentivized

• The resource security ensures business system continuity against any contingency
• Work interruptions due to malware and other threats are minimzed
• It ensures long term use of the IT systems. Eg if Windows is corrupted every day then you will incur extra cost for reinstall. It saves cost.

Incentivized

• We're able to mitigate over 90% of our vulnerability risk without too much effort. It helps find where automated patching fails and we can plan a fix from the findings.
• A side effect of our scanning reveals new devices on our network that aren't cleared to be.

Incentivized