[VOIPSEC] VoipAuditLite

[Rick Dalmazzi]

Eric,

Thanks for trying the VoIPauditLite product, and thanks for your
feedback.  VoIPauditLite is intended to introduce security professionals
to our VoIPaudit - Enterprise Version and VoIPaudit - Consultant Version
products.

Having said that, the Lite version itself is a viable production product
if it is kept up to date with the latest vulnerabilities.  These are
available as a subscription service called VoIPaudit Update.  For
VoIPauditLite users there is a nominal annual fee.

I suspect the reason you didn't find any CCM 5.X vulnerabilities is that
your VoIPauditLite's vulnerabilities database needs to be updated. 

If you or any other VOIPSEC participants are interested in trying
VoIPauditLite and are willing to give us your feedback, I'll waive the
fee for VoIPaudit Update for the first year.  Please email me directly
at rdalmazzi at voipshield.com.

Regards,

Rick

Rick Dalmazzi
President & CEO
VoIPshield Systems Inc.
(613) 224-4443 x201
www.voipshield.com


-----Original Message-----
From: voipsec-bounces at voipsa.org [mailto:voipsec-bounces at voipsa.org] On
Behalf Of Eric Tyberghien
Sent: Sunday, June 29, 2008 2:05 PM
To: voipsec at voipsa.org
Subject: [VOIPSEC] VoipAuditLite

Hi all

 

As a security consultant in a major company, I tried the Cisco version
of
VoIPauditLite.

 

The audited platform was Cisco CCM 5.x and I never found any add-value
of
this product versus generic assessment tool like Nessus.

 

So, I repeated the test on another Cisco "standard" platform with the
same
results.

 

Of course, I didn't select the Denial of service attacks because these
platforms were in production.

 

Has anybody tried VoiPShield's products with success. 

 

I hope that these results are only caused by my misunderstood of the
product
because I don't know any other L7 VoIP security assessment product

 

Could you please help ?

 

Best Regards

 

Eric Tyberghien

Security Consultant

     

_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org