Import Vulnerabilities via Nexpose

If you are currently working with Nexpose and would like to retrieve relevant data such as vulnerabilities and vulnerable endpoints, an integration with Nexpose exists. The collected data from Nexpose automatically arrives via API calls. 

Once the integration with Nexpose is established, you will be able to see in Jetpatch all actions related to nexpose:

1. Create Remediation plan based on Nexpose
2. Donwload Nexpose Report per endpoint server
3. Clear data derived from Nexpose

Prerequisites: 

Communication to Nexpose server from the JetPatch application server must be allowed. 

Configure Nexpose in Intigua Properties

1. SSH to JetPatch application server

2. Stop Tomcat (run command service tomcat stop)

3. vi /usr/share/tomcat/default/conf/intigua.properties

########################################################################
#  "Nexpose" integration. Provided properties for Nexpose integration  #
########################################################################
pg.nexpose.enable=true
pg.nexpose.host.url=https://30.30.0.0:3780
pg.nexpose.username=John
pg.nexpose.password=1234567
#Generate nexpose report per server
pg.nexpose.report-name=JetPatch-CSV 

4. Save and exit

5. Restart tomcat (run command service tomcat restart) 

Create Remediation Plan Based on Nexpose

Read more on How to create Remediation Plan based on Nexpose here.

Download Nexpose Report

Read more on How to download a nexpose report here.

Clear Data derived from Nexpose

 If you would like to remove Nexpose data follow the Clear Data instructions.