OpenVAS
-
The DEMO build is just an OVA that you can import into VMware / VirtualBox and be ready to go in a few minutes... Sadly, their image download seems to be overloaded... A whopping 14 kbit/sec download for me...and the appliance is 3GB... So I'm building from Ubuntu and going to try the OpenVAS9 PPA.
Edit: Clarity.
-
The DEMO build is just an OVA that you can import into VMware / VirtualBox and be ready to go in a few minutes... Sadly, their image download seems to be overloaded... A whopping 14 kbit download for me... So I'm building from Ubuntu and going to try the OpenVAS9 PPA.
Right.
It's not a working appliance like Graylog, or XO.
-
@DustinB3403 said in OpenVAS:
http://www.openvas.org/vm.html
Demo is plainly listed, I'm guessing that is just put there to say, hey if you want to do this, you should really build from sources.
Scroll down to the bottom of the page, and you'll read the following : -
***Important note on these Virtual Appliances
Please note that these virtual appliances are for demonstration/testing purposes and not recommended for regular production uses, particularly for more than a few hosts depending on local system resources. The OpenVAS scanner is resource intensive and may take a long time to start on slower systems, especially when run as a VM on laptops.***
Essentially saying, be sure to give it enough RAM to run.
-
The DEMO build is just an OVA that you can import into VMware / VirtualBox and be ready to go in a few minutes... Sadly, their image download seems to be overloaded... A whopping 14 kbit download for me... So I'm building from Ubuntu and going to try the OpenVAS9 PPA.
Right.
It's not a working appliance like Graylog, or XO.
No, it is a fully working appliance... but I don't feel like waiting 3 days for it to download, lol.
-
@dafyre said
No, it is a fully working appliance... but I don't feel like waiting 3 days for it to download, lol.
I meant working in the sense of "production usable" ... it's more a proof of concept than a working appliance like XO or Graylog offerings.
-
@Veet I did, and I read it as well. Just curious if there was some kind of "paid" or source difference from what they have in the OVA.
-
@dafyre said
No, it is a fully working appliance... but I don't feel like waiting 3 days for it to download, lol.
I meant working in the sense of "production usable" ... it's more a proof of concept than a working appliance like XO or Graylog offerings.
It's quite usable for production -- that's what I ran when I used it in the past. You just can't gimp on the RAM. For production, I'd suggest 8GB or 16GB of RAM or more... Especially for anything more than a few hosts.
-
@dafyre said
No, it is a fully working appliance... but I don't feel like waiting 3 days for it to download, lol.
I meant working in the sense of "production usable" ... it's more a proof of concept than a working appliance like XO or Graylog offerings.
It's quite usable for production -- that's what I ran when I used it in the past. You just can't gimp on the RAM. For production, I'd suggest 8GB or 16GB of RAM or more... Especially for anything more than a few hosts.
Oh, that's good to know.
I admittedly struggled a bit with getting it installed from source. But that's probably just me.
And by probably I mean definitely.
-
@dafyre said
No, it is a fully working appliance... but I don't feel like waiting 3 days for it to download, lol.
I meant working in the sense of "production usable" ... it's more a proof of concept than a working appliance like XO or Graylog offerings.
It's quite usable for production -- that's what I ran when I used it in the past. You just can't gimp on the RAM. For production, I'd suggest 8GB or 16GB of RAM or more... Especially for anything more than a few hosts.
Oh, that's good to know.
I admittedly struggled a bit with getting it installed from source. But that's probably just me.
And by probably I mean definitely.
If you like Ubuntu, they have pre-compiled binaries and such from the PPA. Easy to set up.
https://launchpad.net/~mrazavi/+archive/ubuntu/openvas
I've got a scan going... I am trying the openvas9 beta.
-
Not that anyone cares, but I looked at my OpenVAS VM.........
"Imported from OVA"
I'm. A. Dope.
-
Not that anyone cares, but I looked at my OpenVAS VM.........
"Imported from OVA"
I'm. A. Dope.
No Problem with that either.
-
Not that anyone cares, but I looked at my OpenVAS VM.........
"Imported from OVA"
I'm. A. Dope.
No Problem with that either.
I just mean that I thought I didn't use it. Duh.
It WAS a few months ago!
-
Not that anyone cares, but I looked at my OpenVAS VM.........
"Imported from OVA"
I'm. A. Dope.
No Problem with that either.
I just mean that I thought I didn't use it. Duh.
It WAS a few months ago!
You've slept a few times since then.
-
It got mentioned a year ago... but that's about it.
https://mangolassi.it/topic/5507/it-infrastructure-health-checkup/23
I've never used it.
-
Not that anyone cares, but I looked at my OpenVAS VM.........
"Imported from OVA"
I'm. A. Dope.
No Problem with that either.
I just mean that I thought I didn't use it. Duh.
It WAS a few months ago!
You've slept a few times since then.
I think alcohol is killing my brain cell
-
I've worked with it in the past for a particular issue in a product. Worked for what we needed it for.
-
The Alienvault OSSIM has OpenVAS built in, if I remember correctly. It's much easier to get started with that one... Just download an ISO from their site and go...
https://www.alienvault.com/products/ossim (no infowall or anything like that to go through).
-
https://www.alienvault.com/products/ossim (no infowall or anything like that to go through).
How have I never heard about this product? Downloading now.
-
@scottalanmiller said in OpenVAS:
https://www.alienvault.com/products/ossim (no infowall or anything like that to go through).
How have I never heard about this product? Downloading now.
Really? I wouldn't want to live without it anymore.
-
OSSIM does much more than just OpenVAS... It can be a snort sensor collector and such too.
