Metasploit vs. VMware AppDefense (discontinued)

In security of information it's vital to think like a hacker and it's important to know the tools they use for attacks. So this software gives you the exploits that are already in the wild and to the access of everyone. That's very dangerous so you have to be aware of it.

Incentivized

I believe that the product is priced well enough that a small business that is concerned with data center security can justify using the product. My environment hasn't scaled up very far yet, but I am a little concerned that when we get to a certain point, the management console will get full and be more difficult to track. An enterprise customer might see that as a problem.

Incentivized

• Scanning our network for new or existing vulnerable systems.
• Automation of manual tests and exploits to allow what used to be days of effort to be squeezed into hours.
• Metasploit has become an integral part in our validation of new systems before their inclusion in our production network.

Incentivized

• Provides detailed process and command-line information.
• Provides visibility into what connections are being made to/from a specific server/service.
• Ability to group multiple VMs into service groups for proper correlation.

Incentivized

• If Metasploit could support payloads written in languages other than Ruby, that would be amazing and could help draw in a larger set of contributors.

Incentivized

• Steep learning and a lot of moving pieces
• Very new product and Carbon Black is the only 3rd party vendor that can integrate
• Limited information and training. We've never been to VMworld but it was barely mentioned at the VMUG UserCons we've attended

Incentivized

We don't use it.

Incentivized

Their support chat system is very responsive, and if they don't resolve it quickly with that method, then they will remote in and help that way.

Incentivized

Acunetix vulnerability scanner, Netsparker, SQLMap

Incentivized

We were advised that vShield will be retired and its functionality was being integrated with App Defense. Carbon Black is or was the only AV vendor that integrated with it. A priority for us was to use a VMware supported solution. Sophos Intercept X was creating their own module. Trend Micro Deep Security didn't have any plans in place to move from vShield.

Incentivized

• We have been able to weed out false positives with a more manual vetting of scanned vulnerabilities.
• Our teams have become more well versed in penetration testing with Metasploit to understand the vulnerabilities potentially present.

Incentivized

• For the cost of the upgrade to vSphere Platinum compared to the costs we were already paying for vSphere Enterprise Plus with Operations Management was comparable. It made sense to upgrade and with that, we received the added features of AppDefense.

Incentivized