Nutanix AHV vs. Tenable Nessus

I think Nutanix AOS is a great product and, I would recommend it to anyone. The only reason I did not give it a 10 out of 10 is because I don't do that for any product. Every product has room for improvement.

It is an excellent tool for scanning servers, workstations, and network devices to identify missing patches and misconfiguration; we regularly use it to confirm patch effectiveness after the update; it also helps us for preparing audits such as iso 27001, and regulatory requirements, it also helps us to identify open ports and services that violate security.

• One component to support both compute and storage needs for virtualization.
• Easy expandable as business needs arise both at the node level and larger with blocks.
• Well outlined interface with good historical data.
• API tools are available to obtain logging information from Nutanix that can be used with other monitoring tools such as Splunk.

Incentivized

• Nessus is best at performing vulnerability scans, in fact, it gives findings and moreover accurate findings of the assessments. It does not do penetration testing or exploit the vulnerabilities because it is concerned about scanning the systems/applications.
• In fact, Nessus has multiple profiles/policies to perform different types of scans such as, scans oriented for PCI-DSS, malware scans, web application scans, bad shell shock detection scan to name a few.
• Nessus has the ability to classify the vulnerabilities into risk-based categories from critical to even informational which I think is one of the things that separates Nessus from other vulnerability scanners.

Incentivized

• Nutanix has a huge learning curve. We purchased the on-line training course when we moved to the platform and it was literally weeks of instruction. It was so extensive, in fact, that we ran out of time to complete it before the test.
• Operations that cannot be done from the browser require running commands from a terminal emulator; perhaps owing to the newness of the platform, documentation is not robust. I highly recommend you buy the tech support.
• Software updates are sometimes rushed to release. I've gotten to where I wait at least a few weeks after release before installing them, as I've run into significant issues with buggy software. Such installations have required time-consuming tech support calls to resolve.
• While the promise of perpetual VM uptime is being fulfilled, the dashboard frequently reports issues that need to be resolved.
• Because of significant hardware redundancy, the cost per byte of storage capacity is high.

Incentivized

• The tool has lots of options for setting up before scanning any device, this methodology could be simplified further with default configuration for various devices predefined, anyhow we can use this technique by making use of policies.
• For advanced users we cannot disable the plugins inside the plugin groups, we can enable the whole set of plugins at a time, for few hundreds its ok, but thousands of plugins are of waste of resource and time.

Incentivized

We made a huge financial investment with this platform (four clusters, all-flash storage array), so we're in it for the long haul. Luckily it's a beast. I've had to use support more than any other platform I've administered, but the help has been very good. Nutanix continues to add features and innovations which increase the ROI

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

Nutanix Prism Element and Prism Central are easy-to-use HTML5-based web consoles. The layout makes sense; you're only a few clicks away from getting to where you need to be. The AHV hypervisor is integrated into the platform for a fast and seamless experience. Rich data on VM metrics is also available.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

Due to the cool DFS architecture, Nutanix has good read performance for loads. In general, everything works well. We only ran into problems with very specific workloads that did not allow multithreading. It is also worth noting that loads should be tuned according to best practices for best performance, which is not always an easy task.

Incentivized

Nutanix [AOS] is a leader in the HCI industry and it becomes evident after deploying the software. The solution runs effortlessly and can scale seamlessly. We ran the Nutanix solution on Lenovo Servers and since Lenovo has a close working relationship with Nutanix, you can procure the Nutanix software directly from Lenovo as part of your Lenovo HCI solution. The advantage of going this route is that the hardware has been tested and verified by Lenovo that it is thus certified for Nutanix. The support is then also directly with Lenovo for both hardware and software.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

We looked at both Simplivity and Cisco HyperFlex. Both are pretty good in their own right. Simplivity was very 'efficient' in the way they handled data, but we didn't like the idea of a propitiatory hardware card. Cisco's HyperFlex was our second choice, but we were so impressed with what Nutanix had done for us already, that we were already leaning toward that.

Incentivized

Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.

Incentivized

• Nutanix Beam helps enable enterprises to take control of their total cloud spend with automated cost governance policies. Beam provides unified visibility into public and private cloud spending, including clusters, VMs, and other services.
• Lower administrative overhead, increased employee productivity, and costs savings.
• Nutanix AHV is also generally free to use, which can benefit organizations with budget constraints.

Incentivized

• Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
• The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
• Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.

Incentivized