Educause Security Discussion: Re: Vulnerability Scanner Recommendations

[Barron Hulver <Barron.Hulver () OBERLIN EDU>]

I'm also interested in this as I'm trying to move toward quarterly
vulnerability scans instead of the on-demand as we do now.  Currently I
have my external security consultant handle our vulnerability scans so I
rely on him for guidance for a specific scanner and right now we are
using Nessus.

I have a service for our PCI compliance SAQs and they handle the
external scans for me for just the few IPs in scope for PCI.

Barron



Barron Hulver
Director of Networking, Operations, and Systems
Center for Information Technology
Oberlin College
148 West College Street
Oberlin, OH  44074
http://www2.oberlin.edu/staff/bhulver/




On 11/15/12 11:21 AM, Greg Schmalhofer wrote:
> Educause security group,
>
>  
>
> Can anyone recommend a particular vulnerability scanner software,
> product, appliance, or service that you are using at your campus? This
> is a need at our campus and I am trying to review the different options
> available for a small campus. Thanks for any help, insight, or feedback
> you can provide.
>
>  
>
> Thanks,
>
> Greg Schmalhofer
>
>  
>
> Millersville University
>
> Information Security Coordinator
>
> Millersville, PA