Are there any benefits to using vulnerability scanners such as Nessus Pro or Tenable.io, if we are already using Azure Security Center for vulnerability and update management?
Or does it have any negative effects to do so?
-
I edited the title and body of your question to be more readable and consistent. If this is against your intentions, please roll back to your original version – MechMK1 Aug 20 '19 at 11:09
-
1Looks that you need to compare both products and decide whats best for you, probably they will have different features for sure. – camp0 Aug 20 '19 at 13:04
-
It looks like they even state in their manual that you can in addition to checking for insecure configurations add a vulnerability assessment tool docs.microsoft.com/en-us/azure/security-center/… – Raimonds Liepiņš Aug 21 '19 at 5:43
Azure Security Center rather identifies insecure configurations (e.g. missing system updates) than concrete vulnerabilities. While Nessus authenticated scans also cover insecure configurations, they additionally discovers vulnerable installed software (e.g. through CVE matching).
I dont think that the Azure Security Center sees itself as vulnerability assessment solution. Nessus definitely does that. I would say if you have moderate to high security requirements you should use both.
