Symantec Client Management Suite is designed to automate time-consuming and redundant tasks for deploying, managing, patching, and securing desktops and laptops so organizations can reduce the cost and effort of managing Windows, Mac, Linux, and virtual desktop environments.
N/A
Tenable Nessus
Score8.9 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
Whenever you have computers that aren't easily accessible or you have a big site to cover (or multi location), Symantec Client Management Suite (CMS) is really great to manage all your computers, if it's for installation, software, licenses or even status. Setting up all you need from CMS can take some time, especially when you're in a multi-location site. We had to ask the Symantec engineers to help us a couple of times and set things up because even if we followed the documentation, it wasn't an easy task. But at least, the Symantec engineers are people that know what they do and they're really efficient at it.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It is an excellent tool for scanning servers, workstations, and network devices to identify missing patches and misconfiguration; we regularly use it to confirm patch effectiveness after the update; it also helps us for preparing audits such as iso 27001, and regulatory requirements, it also helps us to identify open ports and services that violate security.
Patch Management: We are able to easily deploy patches to all our workstations and accurately report on compliance.
Software Delivery: We do a lot of software deployments to our end users and with CMS we can quickly create policies or tasks to perform these deliveries and get quick results on our success or failures.
Inventory: Ease of use to get reports of what workstations have what software installed, patch levels, or hardware specifications.
Nessus is best at performing vulnerability scans, in fact, it gives findings and moreover accurate findings of the assessments. It does not do penetration testing or exploit the vulnerabilities because it is concerned about scanning the systems/applications.
In fact, Nessus has multiple profiles/policies to perform different types of scans such as, scans oriented for PCI-DSS, malware scans, web application scans, bad shell shock detection scan to name a few.
Nessus has the ability to classify the vulnerabilities into risk-based categories from critical to even informational which I think is one of the things that separates Nessus from other vulnerability scanners.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
More transparency with the roadmap would be a welcome change. New and upcoming features are usually a surprise until a major Symantec Event takes place but little is heard about those features before and even after, in some cases, leading up to a release.
Documentation for some items is poor. Especially around the Workflow product. It was intended that the documentation for the elements in a workflow would be crowd-sourced, which is a good idea, but in order for that to happen, more people need to be using it and taking the time to draw up the documents.
Cost. Its always a big topic, especially in higher-ed, but Symantec could do more to lower its costs for some product lines in order to gain more acceptance and support. If that was done and more institutions could get their student workers to use the product, once they leave college and go into the "real-world" there is a possibility that they would start recommending Symantec products because of their use in College.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The tool has lots of options for setting up before scanning any device, this methodology could be simplified further with default configuration for various devices predefined, anyhow we can use this technique by making use of policies.
For advanced users we cannot disable the plugins inside the plugin groups, we can enable the whole set of plugins at a time, for few hundreds its ok, but thousands of plugins are of waste of resource and time.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Support at Symantec isn't that great. Client Management Suite isn't even listed on the Support Portal when trying to open a ticket. Your best bet for support is actually the user groups that Symantec hosts. The members of the groups are usually very responsive. With Broadcom buying Symantec, I've seen a huge jump in personnel leaving Symantec, so I'm assuming the support is just going to get worse. Recently for a simple question, I reached out to 5 people just to find out 4 of the 5 had left the company.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Although there are other tools that can be utilized I don't believe those tools are as robust as Symantec Management Platform. The Symantec Management Platform was chosen because of the value it returns internally and for our customers. You can pull just about any data element from an endpoint and provide detailed reports or great graphs for the C-Level
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
