Ron Gula

I will be hosting a webinar that presents Tenable's strategy for agentless auditing and reporting of various US Government standards including FDCC, USGCB, CyberScope and a variety of DISA STIG specifications. The webinar will include:

I'm happy to announce the release of version 3.4 of the Passive Vulnerability Scanner. Tenable recommends that all current PVS customers upgrade to this version as it has major performance enhancements and exploitability reference data in the vulnerability reports. 

Tenable Network Security has released version 3.6 of the Log Correlation Engine. This new version includes many performance enhancements as well as its own web-based user interface. This blog entry describes the new user interface, the increased performance and the new features of LCE 3.6.

Recently, Tenable added exploitability reporting for Nessus. After performing a scan, results can be filtered to see which vulnerabilities have exploits available for them. In the report, you can even see which common exploitation tools have payloads for these vulnerabilities. This is a great way to help prioritize which vulnerabilities to fix first. However, it is not a great way to manage your network or decide whether to patch a system or not. Consider the following conversation that represents many I’ve had on this topic: 

During the months of November and December, Tenable CEO Ron Gula will be running four webinars focused on advanced analysis of network traffic, system logs and user tracking. Please visit the registration page for each of these to sign up.