This question is for you guys that do vulnerability assessment.

What vulnerability tool do you normally use? OpenVass, Saint, Nessus or Rapid7? Do you scan only servers/switches/firewall/routers, etc or the whole networking including workstations?

I am talking a general vulnerability assessment, not compliant.

Last night and today I use OpenVas in a real environment, my supervisor begin to ask the vulnerability assessment for one of our client.

I am glad he asked something like that so I can experiment more, I am taking PWB training but I was worry come on: I will need to get more real experience!!!!. I know vulnerability assessment is not a pentest but I will get it someday very soon.

Tonight I will try Nessus and see what fit better for the company.

Nexpose. It's not perfect, but none of them are. There are many times that the scanner reports nothing "critical" but full compromise happens shortly there after. I hate VA's... I wish compliance programs realized that.