We use Nessus here in our local environment and love it... and it's WAY cheaper than ISS... ;-) ...I've never been a big fan of ISS. Another good commercial product though is STAT - I've used this before for some time. http://www.stat.harris.com/index.asp More polished than Nessus - but also a lot more expensive - we eventually dropped it because Nessus does the job quite adequately for free. Or I've heard good things about Sunbelt Software's Network Security Inspector http://www.sunbeltsoftware.com/SunbeltNetworkSecurityInspector.cfm Hope this helps. Eric Eric Baenen Program Manager - Scientific Network Environments General Dynamics - Advanced Information Systems Phone: 937-255-8180 FAX: 937-255-8845 2255 H Street (AFRL/HEC) Area B Bldg 248 Rm 108 Wright Patterson AFB, OH 45433 -----Original Message----- From: tshilson@mmm.com [mailto:tshilson@mmm.com] Sent: Thursday, April 07, 2005 3:28 PM To: suse-security@suse.com Subject: [suse-security] Choice of Security Scanners We are setting up a formal security scanning program for Lintel and Lin-z (Linux on zSeries) systems. The favored scanner is ISS because that is what we use for our Windows systems. I understand that Nessus is a better choice for Linux systems. What scanners are you using and what do you see as the strong and weak points? If you reply to me off-list I will publish a summary next week. Thanks tom - - - - - - - - - - - - Toto, I have a feeling we're not in the mainframe world any more. _/) Tom Shilson ~~~~~ Unix Team / IT Server Services Aloha Tel: 651-733-7591 tshilson at mmm dot com Fax: 651-736-7689 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here