|
From: William V. <wil...@vi...> - 2019-01-29 03:23:00
|
Dear Enrico
I read your configuration
I'm also do the same thing.
But I install openvas in a other server, no in Packetfence server
I use this command openvasmd -a 0.0.0.0 -p 9390 in openvas to accept omp command to my network
And the last difference in openvas configuration Alert : I put http://name_of_PF/hook/openvas?task=$n and not ip address
But finish the scan, the computer with high risk result don't go to vlan isolation, I think I don't configure well the violation in Packetfence
Hope this can help you
De : Enrico Becchetti <enr...@pg...>
Envoyé : lundi 28 janvier 2019 18:50
À : pac...@li...
Cc : William VANDAL <wil...@vi...>
Objet : Re: [PacketFence-users] openvas scan sucessful but don't put the computer in isolation vlan
Dear William,
could you give more details ? I've also tried openvas without any result. After device is connected
to the network ("automatically network registration") scan didn't start.
My server is Linux Centos 7.6.1810, with yum update, and PF 8.3.0.
Profile:
[PF-DOT1X]
locale=
device_registration=default
filter=vlan:26
description=PF-DOT1X
autoregister=enabled
sources=RADIUS-AAI
scans=OpenVAS
Thanks a lot !
Best regards
Enrico
Il 28/01/2019 05:51, William VANDAL via PacketFence-users ha scritto:
Hello
I configure openvas 9 engine with packetfence
The scan works with Post Reg System Scan after a registration.
But finish the scan, Packetfence do nothing even if the computer has high risk in the results on openvas
I also configure a news violation with trigger openvas : 110002 (id of openvas scan)
Thank you
Best regards
William
[cid:image002.jpg@01CF57FB.C5ADE730]
William VANDAL
Cellule informatique
Tél: (687) 41 40 20
Fax: (687) 41 80 40
ser...@vi...<mailto:syl...@ma...>
_______________________________________________
PacketFence-users mailing list
Pac...@li...<mailto:Pac...@li...>
https://lists.sourceforge.net/lists/listinfo/packetfence-users<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fpacketfence-users&data=02%7C01%7Cwilliam.vandal%40ville-dumbea.nc%7C7aa4386a72bc48953b6d08d684f53d54%7C804c05846474462f95b67dd35ffe4b30%7C0%7C1%7C636842586184375913&sdata=2UDq93RUL3OsCBPmB9gAtmvFzCB2uCWFHt3%2BWDOO9CM%3D&reserved=0>
--
_______________________________________________________________________
Enrico Becchetti Servizio di Calcolo e Reti
Istituto Nazionale di Fisica Nucleare - Sezione di Perugia
Via Pascoli,c/o Dipartimento di Fisica 06123 Perugia (ITALY)
Phone:+39 075 5852777 Mail: Enrico.Becchetti<at>pg.infn.it
______________________________________________________________________
|