OpenVAS Reviews

Qualys SSL Server Test Reviews

OpenVAS mentions (6)

• Link CVE to installed applications?

  Otherwise your on the right path checkout the open source Greenbones OpenVAS (this was Nessus before they closed source and became corporate) or Project Discovery Nuclei. Source: about 1 year ago

• What should I be doing as the sole sysadmin for a company to keep up with security?

  Personally, I was lucky enough to get a license to Nessus for my own scanning, however you can use OpenVAS for some free to scan. Scanners aren't 100% correct no matter where you go but it'll give you some things to look at. OpenVAS. Source: about 2 years ago

• Wanting to protect my own homelab

  Https://openvas.org/ OpenVAS is free and fairly capable. It might struggle cpu on a pi... Might need quite a bit of ram, but I'm hoping you've got some beefier kit in your stack. Source: over 2 years ago

• Free nessus equivalent?

  Maybe OpenVAS would fill the bill. It’s been on my list of things to check out. Source: over 2 years ago

• Internal Vulnerability Scanning

  OpenVAS - https://openvas.org Try it first, its free, just download a prebuilt VM and you're off and running. I found it valuable for my clients. Source: almost 3 years ago

Qualys SSL Server Test mentions (5)

• Unable to have valid chain of authority

  Check it at https://ssllabs.com/ssltest and it will tell you what’s wrong with the chain. Source: about 1 year ago

• PAN-OS thinks the cert for https[:]//supportfiles[.]firemon[.]com is untrusted. Why?

  Didn’t know that one. I generally use ssl server test at https://ssllabs.com/ssltest. Source: over 1 year ago

• Looking for help with VIRTUAL_HOST set up and 502 Bad Gateway (possible bad SSL?)

  As far as the SSL error, your browser does not consider the certificate to be valid. It looks like you’re trying to use Let’s Encrypt (based on your .well-known/acme-challenge location. You’ll also need to provide the intermediary certificate, but there also may be something else wrong (e.g., are you using the staging CA and not the production CA when brokering the certificate?). I can’t tell what’s wrong without... Source: over 1 year ago

• Is there a safe way to enable gzip compression over HTTPS?

  If you want to prove it, check your site with https://ssllabs.com/ssltest. It checks web servers for safe TLS configurations, including whether or not you have TLS compression enabled. Source: about 2 years ago

• Safari problem with Nginx Proxy

  Try running SSL test on server. https://ssllabs.com/ssltest/ It reports incomplete certificate. Did you add whole chain on "ssl_certificate" file? Root cert is not needed but intermediate should be in there with server certificate. Source: about 2 years ago