packetfence
packetfence copied to clipboard
Nessus: trigger scan using API is not possible since Nessus **professionnal** 7
Is your feature request related to a problem? Please describe. If you use Nessus professionnal 7 or above, it's not possible to use PacketFence to trigger scans because API endpoint have been disabled by Nessus.
Sources:
- A Clarification about Nessus Professional
- An introduction to the Nessus API: Generating session tokens and API keys
From 1:
For users who need to initiate and manage scans remotely, we have built a much better user experience in Tenable.io, which offers a robust, supported and better documented API, along with richer reporting options and the ability to manage and federate multiple scanners.
Error you will see in logs:
Error handling trigger_scan : server error: API is not available at /usr/local/pf/lib/pf/scan/nessus6.pm line 135.
It looks like we now need to send API requests to Tenable.io API (cloud). Users need to generate first an API key.
An existing PR exists and I think @fdurand also work on that topic at some point.
Docs:
Describe the solution you'd like Support of Nessus 7 professionnal and above using Tenable.io API
Describe alternatives you've considered Drop Nessus support.