Hello. I am trying to figure out OpenVAS and am sorting through differences in installs. Some companies we deal with are too small and can't afford managed services. Ideally I'd want the install to update automatically, scan the subnet, and email a report to us on a schedule. That way we can see if they need us to come out and do anything and we won't need to bill them monthly, just when they need us. I installed the GCM but it didn't have the alerts page so I installed the OpenVAS9 package on Ubuntu. I come across a few general questions I'm hoping someone can explain.
1. Feeds: The feeds doesn't appear to be updating automatically. Is there a way to schedule updates in the web interface or do I need to manually do it from the console? I could probably write a script for it but it would be nice if it was all done from a single interface. 2. Results: In scanning my router, the Ubuntu install shows only 4 issues. 2 medium and 2 low. The GCE install shows 24 issues. 7 high, 12 medium, and 5 low. Why such a huge disparity? I'm just telling it to scan the target IP. Is there other configuring I should be doing? 3. Versions: GSA vs GSM. The Ubuntu install is GSA and has some extra menus. The GCE has GSM. What is the difference in GSA and GSM? The page at http://www.openvas.org/about-software.html makes it seem like GSA is the interface and GSM is the backend but the web interface on the two boxes don't appear to show that. They look like 2 separate but very similar products. 4. Performance page: The Ubuntu install just shows a "Fallback Report". The GCM has lots of graphs and such. Is there a component or dependency I'm missing? I'm still working through the manual to learn everything and I've been on the IRC for a bit. I appreciate any additional assistance!
_______________________________________________ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
