NSS Group logo

Vulnerability Assessment (VA)

Group Test (Edition 3)

This report is no longer available on line.  However it is still available for purchase in PDF, CD or print versions.

Click here to purchase on line using our secure server.

Foreword

Welcome to the Third Edition of the Vulnerability Assessment (VA) Group Test report

This report started life in 2000 as part of the IDS/VA testing project. Given the increase in the number of participants this year, however, we have decided to divide the report into two: one covering Vulnerability Assessment, and the other Intrusion Detection Systems.

In this report we have five VA products, two of which are updated entries � those products both coming from Symantec � Enterprise Security Manager (ESM) and NetRecon. We have also updated the introductory and summary material, which we would encourage you to read since it covers many of the concepts mentioned in the technical evaluations.

Demand for, and interest in, this report has been tremendous. Feedback confirms we are providing a major source of much needed information and advice to security professionals, and The NSS Group VA Report is considered the definitive guide to the VA market place. Edition 3 provides independent and comprehensive technical evaluations of some of the current market-leading products, and we hope you find it informative and useful.

Bob Walder

Table of Contents

Introduction
Passive Scanner
Active Scanner
The Circle of Strife

Product Reviews

Bindview bv-Control for Internet Security V3
Installation
Configuration
Reporting and Analysis
Verdict
Contact Details

NAI Cybercop Scanner 5.5
Architecture
Installation
Configuration
Reporting and Analysis
Verdict
Contact Details

Symantec Enterprise Security Manager 5.5
Architecture
Agent
Manager
Enterprise Console
Installation
Configuration
Domains
Policies
Templates
Policy Runs
Reporting and Analysis
Verdict
Contact Details

Symantec NetRecon 3.5
Architecture
Installation
Configuration
Reporting and Analysis
Verdict
Contact Details

Vigilante SecureScan NX 2.4
Architecture
Console
Network Agent
Firewall Agent
Installation
Configuration
Reporting and Analysis
Verdict
Contact Details

Performance Testing
How We Tested
Performance Testing

Test Results
Symantec Enterprise Security Manager
Symantec NetRecon
BindView bv-Control for Internet Security
NAI CyberCop Scanner
VIGILANTe SecureScan NX
Summary - Performance Testing

SUMMARY

Appendix A - Vendor Questionnaires

Appendix B - The Test Equipment

Appendix C - The Test Network

Top         Home

Certification Programs

Group Test Reports

White Papers

On-Line Store

Contact The NSS Group

Home

Click here to purchase electronic (PDF) and hard copy versions of this report

 

Send mail to webmaster with questions or 
comments about this web site.

Copyright � 1991-2006 The NSS Group Ltd.
All rights reserved.