Detection of checkmk

[fdgjk]

Hello,

we are using the Greenbone Community Containers.

I’ve got an inquiry about the product detection of checkmk.

In the NVTs I see:
Checkmk Server Detection (HTTP)
Checkmk Agent Detection

Both are using the remote_banner as a detection method. This turned out to be unreliable because of firewall rules and reverse proxies in front of the checkmk server.

Since checkmk is an package the scanner could use the output of apt to detect checkmk.

Package names are for example:
check-mk-agent
check-mk-raw
check-mk-enterprise

More examples can be seen on Download-Archiv für veraltete Checkmk-Versionen

Can this be implemented in the Greenbone scanner?

Thank you

[cfi]

Checkmk coverage is only part of the commercial enterprise feed since quite some years and the same like mentioned for some compliance checks below should apply here as well.

Feature Request: Fortigate Firewall Configuration Checks

Hello, policy / configuration checks are usually only available in the commercial enterprise feed. In this case you would first need to get a paying enterprise feed customer and then could raise a feature request via the known sales / support channel afterwards (Disclaimer: How features are evaluated / accepted is outside of my knowledge so no guarantees on that).