packetfence icon indicating copy to clipboard operation
packetfence copied to clipboard

Nessus: trigger scan using API is not possible since Nessus **professionnal** 7

Open nqb opened this issue 2 years ago • 0 comments

Is your feature request related to a problem? Please describe. If you use Nessus professionnal 7 or above, it's not possible to use PacketFence to trigger scans because API endpoint have been disabled by Nessus.

Sources:

From 1:

For users who need to initiate and manage scans remotely, we have built a much better user experience in Tenable.io, which offers a robust, supported and better documented API, along with richer reporting options and the ability to manage and federate multiple scanners.

Error you will see in logs: Error handling trigger_scan : server error: API is not available at /usr/local/pf/lib/pf/scan/nessus6.pm line 135.

It looks like we now need to send API requests to Tenable.io API (cloud). Users need to generate first an API key.

An existing PR exists and I think @fdurand also work on that topic at some point.

Docs:

Describe the solution you'd like Support of Nessus 7 professionnal and above using Tenable.io API

Describe alternatives you've considered Drop Nessus support.

nqb avatar Mar 07 '22 11:03 nqb