Hello Jonas, OpenVAS has a Manager client (openvasmd) that can be easily controlled through the OMP protocol with the Greenbone Security Assistant (gsa), and a Scanner service (openvassd) receiving scanning requests and parameters from the Manager. And yes, your Manager client can be configured through gsa (check Scanners option in the top menu) to send scan requests to any Scanner service listening on any IP on port 9391. This is particularly useful for distributed architectures in case you have various IP ranges separated by firewalls, each with their own Scanner. This method is not exactly the Master-Slave solution, by it works well for us, and the trafic generated between Manager and Scanner is minimal (real trafic happens between the Scanner and its targets).
In other words, you need a Manager client and the GSA running on one IP, and the Scanner service running on another, with self-signed certificates correctly set up for SSL, and all should work ok. Dont forget though that you will have to update the NVT definitions directly on the Scanner service, and that a bash script doing the updating, set as a cron job, would be particularly helpful if you intend to have many Scanners running concurrently. Hope this helps! [email protected] IT Security Analyst, Nurun Services conseils Inc. -----Message d'origine----- De : Openvas-discuss [mailto:[email protected]] De la part de Turner,Jonas Envoyé : 9 septembre 2016 10:55 À : [email protected] Objet : [Openvas-discuss] HOWTO - Setting Up Remote Scanner? Are there any good documentation on setting up a remote scanner? I have OpenVAS installed on a test server, and I would like to be able to send tasks to it from my main server. I couldn't find any documents online right off the get go. _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
