Openvas 9 - Distributed Setup
If you are responsible for a number of offices located in different regions its best to setup scanners in the regions to best utilise network bandwidth. You can control all these scanners from a single host. The following setup has worked well for me and I hope the following helps you in getting a distributed openvas setup up and running.
First ensure you setup openvas correctly and that it is using libssh0.7 and greater. You can follow my post on how to do this here.
Create an admin account on the newly created remote scanner that will be used for remote administration/scanning.
By default openvas does not listen on TCP connections and you would therefor not be able to connect to it remotely. In order to correct this, update the startup config for openvas-manager.
Use your favourite editor and edit /etc/init.d/openvas-manager
update the DAEMON_ARGS line to reflect the server address and a port of your chosing.
Next setup a new logon on your primary Scanner.
Go to configuration -> Credentials and use the username/password created above.
Next setup the scanner.
Go to configuration -> scanner
click on the new scanner option (small star in the top left hand corner)
Enter the necessary details, ie hostname/ip address plus the port selected above and browse to the copied cacert.pem file mentioned above.
Create the Target host as you would normally. When creating the task, select the new scanner in the "Scanner" section. When the task is run "manually" or via a scheduler it will then connect to the remote scanner which in turn will setup the target and do the necessary scanning.
If the task is stuck on "Requested" and does not change even after refreshing the page, log on to the Primary scanner and view the scanner and manager logs.
First ensure you setup openvas correctly and that it is using libssh0.7 and greater. You can follow my post on how to do this here.
Create an admin account on the newly created remote scanner that will be used for remote administration/scanning.
- openvasmd --create-user=newusername --role=Admin
- openvasmd --new-password=my_secure_password --user=newusername
- openvas-manage-certs -V
By default openvas does not listen on TCP connections and you would therefor not be able to connect to it remotely. In order to correct this, update the startup config for openvas-manager.
Use your favourite editor and edit /etc/init.d/openvas-manager
update the DAEMON_ARGS line to reflect the server address and a port of your chosing.
- DAEMON_ARGS=" --listen=HOSTORIP --port=9393"
- /etc/init.d/openvas-manager restart
Next setup a new logon on your primary Scanner.
Go to configuration -> Credentials and use the username/password created above.
Next setup the scanner.
Go to configuration -> scanner
click on the new scanner option (small star in the top left hand corner)
Enter the necessary details, ie hostname/ip address plus the port selected above and browse to the copied cacert.pem file mentioned above.
Create the Target host as you would normally. When creating the task, select the new scanner in the "Scanner" section. When the task is run "manually" or via a scheduler it will then connect to the remote scanner which in turn will setup the target and do the necessary scanning.
If the task is stuck on "Requested" and does not change even after refreshing the page, log on to the Primary scanner and view the scanner and manager logs.
- tail /var/log/openvas/openvasmd.log
- tail /var/log/openvas/openvassd.messages
Nice post.Thanks for sharing Information.....
ReplyDeleteMorpheus tv apk is the very free and easily designed application which streams the movies videos and tv shows with high-quality it can be used for free.
Android Box
smartphones