Hi,
I am running the below versions.
gsad --version
Greenbone Security Assistant 20.08.0
gvmd --version
Greenbone Vulnerability Manager 20.08.0
openvas --version
OpenVAS 20.8.0
gvm-libs 20.8.0
Most new code since 2005: © 2020 Greenbone Networks GmbH
Nessus origin: © 2004 Renaud Deraison deraison@nessus.org
License GPLv2: GNU GPL version 2
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
uname -a
Linux openvas 4.18.0-240.1.1.el8_3.x86_64 #1 SMP Thu Nov 19 17:20:08 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
cat /etc/redhat-release
CentOS Linux release 8.3.2011
Do I need to whitelist the OpenVAS server IP and ports in the Firewall in order to scan the remote server for any vulnerability? Can I use GVM OpenVAS for both VA (Vulnerability Assessment) and PT (Penetration Testing) tests? If not please suggest if there is any tool to run PT? Thanks in Advance.
Best Regards,
Kaushal
Lukas
December 29, 2020, 11:02am
2
That is not a good idea, please check the topics here, please learn how to search in this forum.
Hello, which ports does Openvas/GVM needs for scanning? My GVM is in the DMZ and I would like to scan hosts in the intranet. Ty
Hello Community,
i’ve got a Problem, and i’ve already done some reasearch on it. Thing is, if i try to Scan a subnet with the Default Alive-test (or any other given else than 'Consider Alive), the test will be canceled right away ( without an error code) and the following report will show nothing. I guess it’s because the Scan fills up the session table of my firewall which leads to no response from any server. Has anyone found a workaround for this Problem? I know i can place a sensor in the s…
I am scanning my services which are all behind a firewall using an external remote sensor, but I’m having problems with the first stage where it identifies which addresses to scan.
I can’t assume alive because there are too many and it would take more than a month to scan
I could allow Pings through just for the scanner but not all machines respond to ping
I could use a TCP-SYN but that doesn’t allow me to ICMP Ping as well
The alternatives which include ICMP ping all use TCP-ACK which is usel…
2 Likes