Re: [Openvas-discuss] Sourcefire integration

2016-08-18 Thread Fábio Fernandes
I looked a briefly to the source too and it is very similar to the Nexpose Integration with Sourcefire script and with some modifications it could work but i am not allowed to test this since the Sourcefire platform is in production, i am only allowed to use solutions that are documented to

Re: [Openvas-discuss] Sourcefire integration

2016-08-18 Thread Eero Volotinen
I looked the source and it looks very simple xml to csv converter & uploader. It might be possible to add basic support to openvas BUT I don't have access to any sourcefire dc for testing.. Eero 18.8.2016 4.04 ip. "Eero Volotinen" kirjoitti: > I think connector might be

Re: [Openvas-discuss] Sourcefire integration

2016-08-18 Thread Eero Volotinen
I think connector might be based on same source. I think it works with openvas with some modifications, if sourcefire dc api is still same. (source code is from year 2014?) -- Eero 2016-08-18 14:05 GMT+03:00 Fábio Fernandes : > Thanks for the tip. This script seems

Re: [Openvas-discuss] Sourcefire integration

2016-08-18 Thread Fábio Fernandes
Thanks for the tip. This script seems similar to the one used by Rapid7 to integrate Nexpose with Sourcefire. Meanwhile i have contacted Greenbone technical sales and they informed me that i should contact Cisco regarding the connector. > No dia 17/08/2016, às 16:36, Eero Volotinen

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Eero Volotinen
If your company is willing to pay, it should be simple to port this nessus opensource connector to openvas.. https://supportforums.cisco.com/document/12305426/nessus-report-upload-tool-host-input-api Eero 2016-08-17 17:18 GMT+03:00 Fábio Fernandes : > I think there

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Fábio Fernandes
I think there is no documentation for OpenVAS in the site they advice to use the Greenbone Security Manual. Is the lack of the program greenbone_sourcefire_connector a reason to submit a bug report? > No dia 17/08/2016, às 15:15, Eero Volotinen escreveu: > > You are

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Eero Volotinen
You are free to submit fixes to documentation ;) Eero 2016-08-17 16:39 GMT+03:00 Fábio Fernandes : > It would be nice that they mentioned what works and what does not on the > free version. I spent a lot of time for nothing probably :( . > It would be nice if someone

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Fábio Fernandes
It would be nice that they mentioned what works and what does not on the free version. I spent a lot of time for nothing probably :( . It would be nice if someone with the Greenbone paid version could confirm that the connector exists or the greenbone_sourcefire_connector program. > No dia

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Eero Volotinen
I think that is normal way that opensource works. You usually need to pay for more advanced features like this ;) Eero 2016-08-17 16:01 GMT+03:00 Fábio Fernandes : > That is what i think too. But its strange that it appears in the free > version and in the INSTALL

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Fábio Fernandes
That is what i think too. But its strange that it appears in the free version and in the INSTALL file of the free version it looks like they use the same version but leave some internal components out or maybe they forgot to put it there because it is an feature not used normally by first time

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Eero Volotinen
I think it's only available on commercial greenbone version. So, you should buy greenbone to get connector -- Eero 2016-08-17 13:55 GMT+03:00 Fábio Fernandes : > Strange. If you go to OpenVAS menu Configurations->Alerts and create a new > Alert you see an option that

Re: [Openvas-discuss] Sourcefire integration

2016-08-17 Thread Eero Volotinen
Well. there is no sourcefire connector for openvas. Only supported format is sourcefire report that you can manually import to sourcefire system. ref: https://svn.wald.intevation.org/svn/openvas/trunk/openvas-manager/report_formats/sourcefire/generate (source) Eero 2016-08-17 5:50 GMT+03:00

Re: [Openvas-discuss] Sourcefire integration

2016-08-16 Thread Fábio Fernandes
I think it is supported because it has an specific alert for it and Greenbone appliances use the same version that is available. If it was not supported why there would be an alert for it and why the connector was mentioned in the INSTALL file? > I think it is not supported on openvas. > >

Re: [Openvas-discuss] Sourcefire integration

2016-08-16 Thread Eero Volotinen
I think it is not supported on openvas. Eero 16.8.2016 7.59 ip. "Fábio Fernandes" kirjoitti: > I have been trying to integrate OpenVAS with Sourcefire for sometime now > without success. I have seen in this threads http://lists.wald. >

[Openvas-discuss] Sourcefire integration

2016-08-16 Thread Fábio Fernandes
I have been trying to integrate OpenVAS with Sourcefire for sometime now without success. I have seen in this threads http://lists.wald.intevation.org/pipermail/openvas-discuss/2012-October/004602.html ,