I use and promote GFI LANguard N.S.S. on the University of Westminster Biometrics MSc (Penetration Testing Module) for five key reasons:

First, it is easy for new users to get to grips with as the GUI is intuitive and easy on the eye. Second, it combines both patch and system management auditing functions in one interface. Third, as users get to grips with the more advanced features they realise its power and adaptability. Fourth, the output is clear, concise and requires little manipulation before being presented to upper management in a format they understand - so with tester time costing money, a new user can get the initial and in-depth output they require with minimum training overhead.

And finally, and possibly most importantly from the penetration tester, security auditor and network security perspective, I like the GFI sales model that allows the tester to leave a time-limited version with the customers (or to direct them to the web site) so they too can run the tool and see how easily the gaps in the network can be identified and, where patching or configuration is involved, closed.

Steve Armstrong
(Guest Lecturer at the University of Westminster)
Full Time Penetration Testing Leader / IT Security Auditing Team Manager
Logically Secure

February 2005