Integrate Nessus with Autobahn Fit

Ingest data from Nessus into Autobahn Fit using internal satellites

By integrating Nessus with Autobahn Fit, you will be able to view all your scan information in one platform, including the necessary remediation steps for identified vulnerabilities. Imported scans will be conveniently displayed on the Scan page for easy access and management.

In order to set up this integration, you will need to install an internal satellite that will regularly pull data from Nessus.

1. Nessus setup

1.1. Get Nessus API server URL
1.2. Create Nessus username and password

2. Autobahn Fit setup

2.1. Install Autobahn worker
2.2. Install Docker Image
2.3. Install the integration satellite
2.4. Allow outbound connections

3. View your pulled scans on Scans page

4. Enable/Disable active instances

1.1. Get Nessus API server URL

1 - Login into your Nessus account.

2 - Navigate to the Settings page. You will be directed to the About tab.

3 - Open the My Account tab.

4 - On the My Account tab, click the Generate button.  

A dialog box appears, confirming your selection to generate a new API key. Click the Generate button to confirm. A URL will be generated, copy the one with `api` in its name.

Example value: https://168.119.132.212:8080 or http://168.119.132.212:8080

1.2. Create a Nessus username and password

If you already have an existing Nessus user, you can use the credentials to integrate your Nessus account. Otherwise, follow these steps to create a new username and password:

1 - Login into your Nessus account.

2 - In the top navigation bar, click Settings.

3 - The About page appears, in the left navigation bar, click the My Account button.

4 - In the upper right corner of Users page, click the New User button.

5 - Type in the settings as necessary.

6 - Select a role for the user.

7 - Copy the username and password that you input.

8 - Click Save to save the new user. Your account will appear on the account list.

2. Integrate Nessus with Autobahn Fit

After you collect the required credentials, log into your Autobahn Fit account and navigate to the Integrations page.

1 - Click on ‘Integrations’.

2 - Click Configure on the Tenable - Nessus Internal Satellites card.

4 - You will be directed to Configure an integration page. Click the Add instance button.

A form to add your instance credentials will appear. Fill out the form accordingly.

• Label: Label to differentiate the different instances.
• API server: The path or URL that redirects to the API server of your Nessus installation.
• Username: The minimum permission of the user you are using for the Autobahn integration is Read/Run Reports.
• Password: Password for the added user.
• Network: Currently, only an internal network is available.
• Pull from: The date of the scans to be pulled from. For example: if you select 10 January 2023, all scans that were created since 10 January 2023 onwards will be imported.
• Frequency: The pulling frequency and how often does our engine pull the data.

8 - Once filled, click the Save button to save the instance.

You need to download Autobahn worker after adding your instance(s). The worker is then able to collect Nessus data and push it to Autobahn's cloud. This avoids having to make any firewall changes to allow inbound connections.

1 - Click the download button in the instance card on the Integration page.

2 - Install the downloaded Autobahn worker on the same network as your Nessus probe.

2.2. Install Docker Image

$ sudo apt install docker.io

$ sudo groupadd docker

$ sudo usermod -aG docker ${USER}

$ docker ps

 $ unzip instance_name.zip

 $ cd integration_satellite

$ ./autobahn_probe.sh run

$ ./autobahn_probe.sh run

$ ./autobahn_probe.sh stop

 $ ./autobahn_probe.sh uninstall

 ./autobahn_probe.sh help