Greenbone Security Manager with Greenbone OS 4

Description

The Greenbone Security Manager is a dedicated appliance for vulnerability scanning and vulnerability management. It is a specifically developed platform optimized for vulnerability management. It is offered in different performance levels. Introduction Read Before Use GSM Overview Enterprise class (GSM 5300/6400) Midrange class (GSM 400/600/650) SME class (GSM 100) Sensors (GSM 25/25V) GSM ONE GSM CE Migrating from GOS 3 to GOS 4 GSM ONE GSM 25V GSM 25 and GSM 100 GSM 400 up-to 6400 Changes of default behaviour I want to ... System Administration Introduction Log in as admin Authorization Concept User Level Access System Administration Level Access System Administration Access Committing Changes Setup Menu Users Management System Administrator password change Managing Web Users Network configuration Network Interfaces DNS server Global Gateway Hostname/Domainname Management IP Addresses Display MAC/IP addresses Expert Mode Services HTTPS SSH GMP SNMP Data import Backup Feed Key Synchronization Sync port Sync proxy Cleanup Time Synchronization Keyboard Mail Server Central Logging Server Time Maintenance Selfcheck Backup and Restore Upgrade Management Feed Management Power Management Shutdown Reboot Advanced Support Superuser Support Shell GUI Introduction GUI Concepts Dashboard Main Dashboard Scan dashboard Assets dashboard SecInfo dashboard Charts Icons Powerfilter Components Saving and Management Tags My Settings GUI Administration User Management Creating and Managing Users Simultaneous Log in User Roles Guest Log in Super Admin Super Permissions GetUsers Role for Observers Groups Permissions Sharing Individual Objects for Other Users Central User Management LDAP LDAP with SSL/TLS RADIUS Vulnerability Management Scanning Simple Scan Wizard Advanced Wizard Manual Configuration Authenticated Scan using Local Security Checks Pros and Cons of Authenticated Scans Credentials Requirements on Target Systems with Windows Requirements on Target Systems with Linux/UNIX Requirements on Target Systems with ESXi Requirements on Target Systems with Cisco OS Scan Configuration Creating a New Scan Configuration Scanner Preferences General Preferences Ping Preferences Nmap NASL Preferences Obstacles while Scanning Hosts not found Long Scanperiods NVT not used Scheduled Scan Alerts Reports and Vulnerability Management Reading of the Reports Results Notes Creating notes Generalizing Notes Managing Notes Overrides and False Positives What is a false positive? Creating an Override Disabling and Enabling Overrides Automatic False Positives Asset Management Dashboard Hosts View Modifying Hosts Adding Hosts Host Details Operating Systems View Classic Asset Management Prognosis SecInfo Management SecInfo Portal Network Vulnerability Tests Security Content Automation Protocol (SCAP) CVE CPE OVAL CVSS DFN-CERT CERT-Bund Reports Delta Reports Report Plugins Import of additional plugins Compliance and special scans Generic Policy Scans File Content Patterns Severity Example Registry Content Registry Content Pattern Severity Example File Checksums Checksum Patterns Severity Example Windows Example Windows CPE-based CPE-based, simple checks for security policies Checking policy compliance Finding problematic products Detecting absence of important products Standard Policies IT-Grundschutz Checking IT-Grundschutz Import of results into a spreadsheet application Import of results into IT-Grundschutz tools Result classes of IT-Grundschutz checks Supported measures PCI DSS Payment Card Industry Data Security Standard Greenbone Security Manager and PCI DSS Policy Monitoring BSI TR-03116: Kryptographische Vorgaben für Projekte der Bundesregierung Special Policies Mailserver Online Test TLS-Map Preparations Checking for TLS Exporting the scan results Conficker Search Search methods for vulnerability and infection Execute search for vulnerability and Conficker OVAL System Characteristics Collecting Scan Results as OVAL SCs Exporting OVAL SCs Example: Using OVAL SCs with ovaldi Greenbone Management Protocol Activating the GMP Protocol Access with gvm-cli.exe Configuring the Client Starting a Scan using gvm-cli gvm-pyshell Starting a Scan using gvm-pyshell Example Scripts Status Codes Master Setup Setup of the remote scanner Sensor Communicating with the Sensors Performance Scan Performance Selecting a Port List for a Scan About Ports Which Port List for which Scan Task Scan Duration Total Security Scan Configuration Tasks Backend Performance Appliance Performance Integration with other Systems Integration with third-party vendors OSP Scanner Verinice IT Security Management Importing of the ISM Scan Creation of Tasks Remediation of Vulnerabilities IT Security Baseline Importing of the ITG Scan Nagios Configuration of the GSM User Configuring the Plugin Caching and Multiprocessing Firepower Management Center Installation of the Report Plugin Configuration of the Host-Input-API clients Configuration of Alerts on the GSM Splunk Configuration of the Splunk Alert Accessing the Information in Splunk Tools GVM-Tools check_gmp.py Splunk Application Setup Guides GSM ONE Requirements Resources Supported Hypervisor Verification of Integrity Deployment Importing of the Virtual Appliance Import into VirtualBox General system setup Login to the Webinterface GSM ONE troubleshooting GSM 25V Requirements Resources Supported Hypervisor Deployment Installation of the GSM 25V General system setup GSM 25 Installation Serial Port Startup General system setup GSM 100 Installation Serial Port Startup General system setup Login to the Webinterface GSM 500/510/550 Installation Serial Port Startup Firmware Notice General system setup Login to the Webinterface GSM 400/600/650 Installation Serial Port Startup General system setup Login to the Webinterface GSM 5300/6400 Installation Serial Port Startup General system setup Login to the Webinterface Architecture Protocols Security Gateway Considerations Standalone/Master GSM Sensor GSM Frequently Asked Questions What is the difference between a scan sensor and a scan slave? Scan process very slow Scan triggers alarm at other security tools On scanned target systems appears a VNC dialog After Factory Reset neither Feed-Update nor System-Upgrade works Glossary Host Quality of Detection (QoD) Severity Solution Type Index