Likelihood to Recommend For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.
Read full review Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Read full review Pros Skybox manages compliance for firewalls better than we have seen with other tools. Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change. The Skybox network map is more detailed than other management tools showing us paths other tools didn't find. Read full review With Nessus we can find the missing critical patches for a server or workstations. Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up. Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties. Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation. Read full review Cons User experience. On the first approach, it's not the simplest tool that I have ever used. Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox. Too many updates of the product. Read full review Could use an upgrade within reports. Scans can take a long time to complete. Have to break them down in small sections. Read full review Likelihood to Renew Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Read full review Usability It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision
Read full review It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.
Read full review Support Rating The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.
Read full review I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
Read full review Alternatives Considered Read full review Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with
Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Read full review Return on Investment Overall ROI is good as this product is an augmentation for us but we already have a mature security program with an experienced security team so the ROI is high. Read full review Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners. The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan. Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews. Read full review ScreenShots