Re: [Inprotect-users] Problems adding hosts to scan with Nessus

[<da...@eu...>]

Michael,

Here's a little walkthrough that I wrote for another Inprotect user.  It will take you from start to finish on using the web application to configure and run a scan.  It's not to heavy on the details, just enough to run a basic nessus scan.  Hopefully, this should resolve any issues you have with the app.  For anyone else reading this, please let me know if there is anything that needs to be corrected and/or if I've left anything out. Thanks

1. Settings->Manage Users: When creating a new user account be
sure to check off the necessary permissions.  Manage Users, Manage
Profiles, Manage Zones and Servers, Run Nmap, Run Nessus.  This will
set the appropriate variables in the users table on the database. 
These variables are referenced when you access certain pages within
the application (example: the 'admin' variable is checked when
accessing the Manage Users page).

2. Create a Profile: 

a. Provide whatever name and description you want.  The
'Global/Private' option refers to who can see/use this profile.  If
you set to Global, all users that can run a nessus scan and manage
profiles will be able to use and manipulate this profile.  If set to
Private only you will be able to use and manipulate this profle.

b. Autoenable: Determines whether or not you wish to automatically
enable certain sets of plugins.  If set to 'Category', you will then
need to select which sets will be automatically enabled.  This is
done right below the drop down box in the Category Table.  If you set
this to 'Family', you will need to do the same in the Family Table.

c. Click Save

d. Edit Details: If you have used Nessus before this should be
familiar. These are all the Nessus specific settings that you would
normally access and configure in the Nessus client.  Make sure you
save these settings once you have configured them.

e. Edit users:	Pretty self explanatory here.  I think by default the
user account that created the profile is added as a user for this
profile.  Again, make sure the settings are saved.

3. Create a Server:

a. The server ID is very important.  It needs to match the ID listed
in the inprotect.cfg file.  By default the ID starts at 1.  The ID
number will increment by +1 for each additional server created
through the web application.

The rest of these settings should be pretty self explanatory.

4. Create a Network Zone:

a. Again, give the zone whatever name/description you want.

b. After you create the zone, you should be prompted to go back the
Manage Zones page where you can edit the details of your newly
created zone.

c. Add the network range.  This is the IP block that you want your
scanning engine to scan.
d. If you've created the Network Server correctly it should show up
the nessus servers box.  Click on the server and then click 'Add
servers'.

e. Go back to the Manage Zones page and edit your zone again.  This
time click on 'Edit Zone Users'.  Highlight your user account and add
it to the zone.

f. Go back to the Manage Servers page and edit your nessus server. 
At the bottom of the page should be a link to Add/Edit Nessus Zones. 
Click on this link.  You should see your network zone in a box below
an empty table.  Highlight your zone and click 'Add selected zone'.

At this point you've done the following:
1. Created your user account
2. Created and configured your initial profile
3. Created and configured your Inprotect/Nessus Server
4. Created and configured your Network Zone
5. Made sure that your user account is added to the profile and
network zone.
6. Made sure that the Network Zone is added to the Nessus Server

Now you should be able to set up a schedule to scan the range in your
Network Zone.

That should do it,
Yad
----- Original Message -----
From: Michael Boman <mic...@bo...>
Date: Wed, 09 Jun 2004 09:36:57 +0800
To: Inprotect Users ML <inp...@li...>
Subject: [Inprotect-users] Problems adding hosts to scan with Nessus

> Hello,
> 
> I have problem to add hosts and networks to scan with Nessus. I've
> downloaded the 0.18a release and fixed the SQL file. Everything except
> adding hosts to scan seems to be working. I already done a quick Google
> on the subject and couldn't find anything useful.
> 
> Please let me know how I can add hosts to scan with Nessus.
> 
> 
> Best regards
>  Michael Boman
> 
> -- 
> Michael Boman <mic...@bo...>
> BOSECO Internet Security Solutions - http://www.boseco.com
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: GNOME Foundation
> Hackers Unite!  GUADEC: The world's #1 Open Source Desktop Event.
> GNOME Users and Developers European Conference, 28-30th June in Norway
> http://2004/guadec.org
> _______________________________________________
> Inprotect-users mailing list
> Inp...@li...
> https://lists.sourceforge.net/lists/listinfo/inprotect-users

-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm