eEye Retina Network Security Scanner v5.10 & REM Security Management Console: Product Report on PCI Suitability

Overview

In Q3 of 2008, NSS Labs performed comprehensive testing of the eEye Retina Network Security Scanner v5.10 as a Vulnerability Assessment Scanner (VA) for internal use within payment card environments. This paper contains the conclusions and associated data from a series of exacting tests performed on software installed in real-world test lab. It is important to note that this test was designed to determine the viability of the vulnerability scanning product for internal use within payment card environments. As such, NSS Labs tested the scanner's ability to accurately identify and classify a much broader range of application vulnerabilities than would be required for an external vulnerability scanner - such as those scanning services certified by the current PCI ASV program.