Cisco HyperFlex HX-Series [EOL] vs Tenable Nessus comparison

"The technical support has been helpful. We are always able to get through to the right person."

"The solution is stable."

"It is very scalable. It is also very secure. Cisco's security portfolio is integrated with it, which makes it secure. It is a platform-based device. Its performance is also fairly good in comparison to any other solution."

"It's very easy to use and quite a mature product."

"The feature that we are most interested in is the scalability. When needed, we are able to add more nodes and scale it up further."

"It is a solution that best suits thre needs of our organization."

"The most valuable feature was the backup - it was easy to back up. It was also very easy to administrate and manage the system; much easier and faster. Finally, it was easy to extend the disk capacities."

"Its most valuable feature is its flexibility."

"Tenable Nessus has a good performance, is very user-friendly, and is easy to use."

"I like its ease of use. It has the script that is pre-built in it, and you just got to know which ones you're looking for."

"The features of Tenable Nessus that I have found most valuable are its reliability and its ability to collate a dependable output, where we are able to get the same vulnerability when we test manually. The output is quite reliable."

"Ease of reviewing scores, identifying vulnerabilities, and getting information on them."

"The most valuable feature of Tenable Nessus is vulnerability assessments. There are a lot of threats around the world and this solution is the first to come out with detection rules."

"I have found the vulnerability assessment and the reports to be useful."

"The most valuable features of Tenable Nessus are the scanning option. Advanced scanning is highly useful. The offline config audits and application assessments are useful."

"It gives a holistic view of your entire environment."

"We had a bit of complexity to think about how to migrate our legacy infrastructure into Cisco HyperFlex."

"Some of our customers do not want to adopt the Cisco ACI solution. They want to manage Cisco HyperFlex by integrating it with their own management solution."

"When it comes to customer needs, the licensing price could be better."

"Its price could be better."

"We would like to see better integration in the next release of this solution."

"A stretch function is really needed. Germans think that because of the high availability and the security that two data centers are better but we want edge all in one cluster. This is a needed feature, the cluster feature, and we'd also like to see a possibility for ROBO offices."

"Cisco HyperFlex should decrease the amount of memory needed from the Controller VM that controls the physical discs. They control the discs by using the virtual VM over every ESXi host and the VM consumes memory and consumes more hardware resources. They have to improve that by decreasing the amount of required memory and CPUs to control this disc on the server."

"We would like to have the ability to not have to reboot while doing updates. Being able to work through updates with as minimal amount of impact to users."

"They have added a new Tenable Nessus Expert. That is their new product, which caters to the cloud and everything else. I am assuming that the new features and product enhancements are based on that tool set, but we haven't reviewed it yet."

"There could be an integration between Tenable Nessus and other Tenable products. It will help us manage all the solutions using one dashboard."

"We'd like to see the solution embrace more user-friendliness."

"I would like to see an improvement in the ranking of high, medium and low vulnerability."

"They should improve the I/O reporting and the customized spreadsheet export feature."

"Online learning could be a bit better."

"The price could be more reasonable. I used the free Nessus version in my lab with which you can only scan 16 IP addresses. If I wanted to put it in the lab in my network at work, and I'm doing a test project that has over 30 nodes in it, I can't use the free version of Nessus to scan it because there are only 16 IP addresses. I can't get an accurate scan. The biggest thing with all the cybersecurity tools out there nowadays, especially in 2020, is that there's a rush to get a lot of skilled cybersecurity analysts out there. Some of these companies need to realize that a lot of us are working from home and doing proof of concepts, and some of them don't even offer trials, or you get a trial and it is only 16 IP addresses. I can't really do anything with it past 16. I'm either guessing or I'm doing double work to do my scans. Let's say there was a license for 50 users or 50 IP addresses. I would spend about 200 bucks for that license to accomplish my job. This is the biggest complaint I have as of right now with all cybersecurity tools, including Rapid7, out there, especially if I'm in a company that is trying to build its cybersecurity program. How am I going to tell my boss, who has no real budget of what he needs to build his cybersecurity program, to go spend over $100,000 for a tool he has never seen, whereas, it would pack the punch if I could say, "Let me spend 200 bucks for a 50 user IP address license of this product, do a proof of concept to scan 50 nodes, and provide the reason for why we need it." I've been a director, and now I'm an ISO. When I was a director, I had a budget for an IT department, so I know how budgets work. As an ISO, the only thing that's missing from my C-level is I don't have to deal with employees and budgets, but I have everything else. It's hard for me to build the program and say, "Hey, I need these tools." If I can't get a trial, I would scratch that off the list and find something else. I'm trying to set up Tenable.io to do external PCI scans. The documentation says to put in your IP addresses or your external IP addresses. However, if the IP address is not routable, then it says that you have to use an internal agent to scan. This means that you set up a Nessus agent internally and scan, which makes sense. However, it doesn't work because when you use the plugin and tell it that it is a PCI external, it says, "You cannot use an internal agent to scan external." The documentation needs to be a little bit more clear about that. It needs to say if you're using the PCI external plugin, all IP addresses must be external and routable. It should tell the person who's setting it up, "Wait a minute. If you have an MPLS network and you're in a multi-tenant environment and the people who hold the network schema only provide you with the IP addresses just for your tenant, then you are not going to know what the actual true IP address that Tenable needs to do a PCI scan." I've been working on Tenable.io to set up PCI scans for the last ten days. I have been going back and forth to the network thinking I need this or that only to find out that I'm teaching their team, "Hey, you know what, guys? I need you to look past your MPLS network. I need you to go to the edge's edge. Here's who you need to ask to give me the whitelist to allow here." I had the blurb that says the plugin for external PCI must be reachable, and you cannot use an internal agent. I could have cut a few days because I thought I had it, but then when I ran it, it said that you can't run it this way. I wasted a few hours in a day. In terms of new features, it doesn't require new features. It is a tool that has been out there for years. It is used in the cybersecurity community. It has got the CV database in it, and there are other plugins that you could pass through. It has got APIs you can attach to it. They can just improve the database and continue adding to the database and the plugins to make sure those don't have false positives. If you're a restaurant and you focus on fried chicken, you have no business doing hamburgers."

"The report for counters is too simple and would be improved by a dashboard."

"If you don't look at the costs of the systems, the scalability is quite good."

"Here in Brazil... it is very expensive. It's very hard for almost all companies to buy even the small version of this solution."

"Comparable solutions with switches, storage, and services are cheaper than HyperFlex. It should be cheaper."

"The cost is expensive, but there is a chance to save money in the future."

"It is highly priced compared to other vendors."

"The licensing is perpetual and the only thing that you may need to pay for on a monthly basis is if you're going to use their cloud-based management features."

"The product could be cheaper."

"It's roughly $30,000 per Hyperflex license, so that would be about $60,000 a year."

"The price of the solution is reasonable."

"The price of Tenable Nessus is too expensive for each service center."

"Tenable Nessus needs to be licensed. We own a license for the security center and that license is charged by the number of IP addresses that you can scan. You're allowed to have as many scanners as you want and there's no license for the number of scanners. We have a bunch of Nessus scanners out there, and as long as we're comfortable with staying under that IP address limit, that's really all we have to be concerned about."

"It has a fair cost and very good cost-benefit ratio."

"The cost is around $4,300 per year. Use is unlimited. You don't pay more if you want to use it for another IP."

"Cost-wise, it's an affordable tool."

"The solution is expensive."

"Nessus Manager is not an expensive product. It has its limitations, but the pricing reflects that. We have a yearly subscription."