Greenbone OpenVAS Summary
The integration of Greenbone OpenVAS vulnerability management with the Centraleyezer Vulnerability Management platform enhances the import and management of security findings. This collaboration allows organizations to efficiently identify, prioritize, track, and remediate vulnerabilities, thereby improving their overall security posture and risk management.
Greenbone OpenVAS Key Features
Data Import:
Import applications, scan summaries, and vulnerabilities from Greenbone OpenVAS security tools into Centraleyezer, either on-demand or via automated schedules.
- Supported formats: CSV.
Detailed Findings:
Centraleyezer provides comprehensive request/response details for vulnerabilities detected by OpenVAS tools.
Risk Scoring:
Configurable severity values for OpenVAS findings, adjustable based on organizational risk policies.
Selective Data Import:
Supports filtering based on status, scan type, and severity for more precise data imports.
Considerations
The integration supports mapping one Greenbone OpenVAS security tool instance with one Centraleyezer instance.
Configuring a different OpenVAS instance in the plugin will overwrite previously imported data.
Requirements
System Requirements:
Centraleyezer Prerequisites: Latest version of the Centraleyezer Vulnerability Management Platform recommended.
Greenbone OpenVAS Tool Prerequisites: API access must be enabled with proper authentication and must support export of vulnerability findings and API-based integration.
Permissions and Roles:
Centraleyezer: Requires System Admin or Application Security Manager permissions.
OpenVAS Security Tools: User access for vulnerability scan information.
Import mappings require admin-level permissions.
Release Notes
Version 1.0.0:
New mappings for vulnerabilities from Greenbone OpenVAS security tools during scans include:
IP Address
Title
Port
Protocol
Results
CVE ID
Threat Level
Solution
Severity
Impact