Lansweeper vs. Tenable Nessus

Because of its slowdown as we have acquired more equipment, I think LANSweeper may be better suited for smaller environments. We have 3000+ users and over 1500 devices on our WAN. It has shown considerable performance issues as we have grown. Maybe moving it to a full blown SQL instance will make things a bit better. But as it stands, it has gotten tiresome waiting for it to update and refresh.

Incentivized

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Incentivized

• Lansweeper is grabbing lots of data from the machines without slowing the network and the client machines. We can easily get all the installed software data, hardware and linked hardware and all the user you can grab from the AD (computer and user).
• Lansweeper can now scan Windows, Mac and Linux with an agent installed (or not if you want that the server is the one pulling the data).
• The web interface is really friendly user and offers lots of possibilities to personalize your dashboard as you see fit.
• Reports engine is really powerful and easy to monitor your machines and also your security issues.

Incentivized

• Shows you how to fix certain vulnerabilities and the commands to run.
• Gives you the CVEs that the vulnerabilities are matched to.
• Easy to understand the vulnerabilities list, giving reasons why the issues need to be patched or fixed.

• Ease of use - pushing software can be a complicated process.
• Detecting assets sometimes means going to each machine on opening ports on the firewall.
• Reporting can be hard to figure out but you can ask on their forum. I find that a lot of my questions already have been asked.

Incentivized

• Could use an upgrade within reports.
• Scans can take a long time to complete. Have to break them down in small sections.

Incentivized

The price to function scale is so far towards function it would be stupid to get rid of it

Incentivized

Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Incentivized

Tenable Nessus is a great product and provides a lot of value, but it is difficult to set up and use and the amount of data it generates can be overwhelming. It does help us prioritize based on the severity of the detection, however there are sometimes mitigating factors that we have implemented that Nessus does not account for, which causes lots of noise in the reports.

Incentivized

Lansweeper offers a variety of customer support options (including KBs for self-serve and get in touch with them via email), and most importantly, it's a matter of dialing within their allotted supporting time frames. However, I always make sure to provide the following information:

- Screenshots of the issue (if available).

- Program Files (x86)/Lansweeper/Service/Errorlog.txt, as present on your Lansweeper server.

- If it exists, the error log present in Program Files (x86)/Lansweeper/Website/App_Data.

Incentivized

I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Incentivized

Lansweeper is DRAMATICALLY cheaper than KACE and provides the same level of reporting and inventory of asset data. Where KACE outshines Lansweeper, is Lansweeper has a very minimal software deployment system that requires clients to have direct access to a common file share. KACE allows you to upload files directly into it's environment, and assets can download over HTTPS those files for installation anywhere. Spiceworks was a great inventory and helpdesk system for free - but the product I feel has gone stale and not nearly as powerful as it use to be - for that reason Lansweeper appears to have taken up the charge and utilized a lot of Spiceworks was going for

Incentivized

Ease of deployment and use even for junior analysts, strong plugin support, and up-to-date CVE coverage, cost-effective licensing, especially for mid-size companies, and seamless integration with the SIEM tool. Overall, Nessus hit the right balance between functionality, performance, and total cost of ownership for our needs and usability.

• I would consider that ROI has been achieved - it wasn't expensive. However, Spiceworks could have done the same for free.
• Too much manual intervention. Not strong beyond basic Microsoft products so we had to keep an eye on everything.
• Great sniffer of hardware on the network including switches, routers, printers.
• Lack of features that are essential for enterprise ITAM.

Incentivized

• It has helped identify security flaws in our infrastructure that has helped better secure our client's data. It did so quickly and efficiently so I was able to move on to other tasks.

Incentivized