N-able N-central vs. Tenable Nessus

N-Able is perfect for an MSP environment. It gives all the standard functionality an IT professional needs out of the box and can be configured to show almost anything required. For example, we have configured a dashboard to show when our backups need attention for each customer. This is achieved by running a small script on repeat via N-Central everyday/evening, and the result gives us information on the dashboard to help us identify exactly what is working and what needs looking into.

Incentivized

It is an excellent tool for scanning servers, workstations, and network devices to identify missing patches and misconfiguration; we regularly use it to confirm patch effectiveness after the update; it also helps us for preparing audits such as iso 27001, and regulatory requirements, it also helps us to identify open ports and services that violate security.

• Remote tasks - entry-level techs can run basic tasks without physically touching a piece of equipment.
• Remote support - remote controlling user devices is easy and saves a lot of time with having to initiate a remote session.
• Management of devices, particularly patch management and anti-virus management - you can automatically approve and deploy patches and schedule automatic AV scans.

• Nessus is best at performing vulnerability scans, in fact, it gives findings and moreover accurate findings of the assessments. It does not do penetration testing or exploit the vulnerabilities because it is concerned about scanning the systems/applications.
• In fact, Nessus has multiple profiles/policies to perform different types of scans such as, scans oriented for PCI-DSS, malware scans, web application scans, bad shell shock detection scan to name a few.
• Nessus has the ability to classify the vulnerabilities into risk-based categories from critical to even informational which I think is one of the things that separates Nessus from other vulnerability scanners.

Incentivized

• Customer support just points to online guides and I feel they aren't helpful.
• During the trial they turn on a lot of features. In my experience, if you play around with the features, they charge you for them. Keep this in mind if you move forward with N-Able - they will charge for "trialed" services.
• In my experience, some services that you're being charged for can't be disabled or monitored by you or your team. You only see them on the monthly invoice.
• In my opinion, the "Scripting Automation" doesn't provide value. You're either going to be writing your own batch or Powershell to make scripting work.
• In my opinion, monitoring software deployments is painful.
• The default monitoring template can't be duplicated, edited, or referenced. You'll find that the default monitors in an unusual way and will throw needless recurring alerts into your ticketing system. To avoid this, you need to create a template from scratch which takes many hours to set up.
• In my opinion, they're more concerned about a quick buck than customer service. "Buyer beware" company.

• The tool has lots of options for setting up before scanning any device, this methodology could be simplified further with default configuration for various devices predefined, anyhow we can use this technique by making use of policies.
• For advanced users we cannot disable the plugins inside the plugin groups, we can enable the whole set of plugins at a time, for few hundreds its ok, but thousands of plugins are of waste of resource and time.

Incentivized

Overall we have liked our solar winds experience, however, as our company has grown to support larger enterprises, this product does not have the functionality that our teams need in order to fully support them. The lack of granularity with backups and lack of ability to support nutanix environments is slowly drawing us into the use of other tools.

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

The user interface is fairly straight forward, with logic groupings for objects. I did not deploy this software, but am one of the daily administrators. Once you get the correct agent package (Which can be a challenge) the integration into AD is not bad. The UI could be more customized, but that may have been a design choice.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

Every time we have reached out to SolarWinds they are quick to respond, even offering support chat 24/7. Their support team is great and works with you to find solutions to issues. They have taken items we had issues with before and used those to create updates so that the issue is handled better in the future.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

Make sure if you your using a vm you follow the instructions for provisioning to the letter or it will be starting from square one

Incentivized

Our version of SolarWinds was old and running on old hardware, but it was way easier to setup and do things with. It did not do everything N-able does such as patch management, or at least we didn't have a module to do so if one existed. However it definitely seemed easier to use and possibly more stable.

Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.

Incentivized

• We have lost hundreds of hours on the phone/emailing support with no resolution for any of our issues
• We had to move all of our services away which was very painful
• Staff satisfaction was low having to deal with this company

• Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
• The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
• Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.

Incentivized