Fortra Tripwire IP360 Reviews

We used the product for scheduled vulnerability scanning and detecting changes within our assets.

We could manage our entire IP range with the solution. We could also manage it based on specific assets. Scheduled reports and distributed reports were also valuable. We did it for our compliance requirements.

Tripwire IP360 helps me to discover most of the vulnerabilities. I'm specifically talking about system vulnerabilities, not application vulnerabilities. I like the way that it prioritizes these vulnerabilities, as it allows me to focus on the most important ones first and then follow up with the rest.

The most valuable features of this program are the low rate of false positives, and the ability to go deep and examine why a vulnerability was discovered, as well as how it was discovered. I believe these are the two main features that I like.

Another great feature is the ability to scan through host-based agents which provides faster, more reliable and a network-friendly way to scan. Having a scan agent installed in the target system provides faster results as hundreds of agents can run at the same time in hundreds of targets instead of scanning through the network. Network scanning requires credentials to connect to a system, has a limit of parallel scanning and creates unwanted network traffic.

It gives us reports on vulnerabilities.

They keep expanding what the solution is checking.

We have multiple uses for this solution, we use it for breakouts and early detection. We use it much more for security rather than for compliance on policies. Then it's more about the whole infrastructure, early detection, file integrity management, and everything else.

It's become the pinnacle point for anything that enters the network or anything that's passing through to production to first be affected by IP360, hardened, and up to standard. For our integrity management, one was deployed in the bank about two years ago and that's still going to expand the usage and the product itself. That will go hand in hand with training and expanding the product as for where it's deployed. 

The most valuable feature of the product is reporting on an audit after a vulnerability scan is completed, and furthermore, the details that the audit report provides.

Given the audit report, you are able to investigate how the vulnerability is triggered, along with all the other information surrounding the vulnerability.

This product detects vulnerabilities which exist in the environment, and provides enough information that allows for remediation, thereby securing the environment.

After remediation is completed, executing another scan allows us to check if the remediation has been performed properly.

It’s most valuable feature is the ability to schedule and run vulnerability scans as needed.

It has enhanced the security program by ensuring that all external-facing systems are scanned on a routine basis.